| CVE-2026-117882 |
Use-after-free in the Layout component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117878 |
Other issue, use-after-free in the Storage: IndexedDB component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117879 |
Incorrect boundary conditions in the Layout: Tables component
|
7.3
High
|
Oct 27, 2026 |
| CVE-2026-117880 |
Use-after-free in the XML component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117876 |
Use-after-free in the Layout: Text and Fonts component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117877 |
Use-after-free in the Layout: Text and Fonts component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117874 |
Use-after-free in the Internationalization component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117875 |
Use-after-free in the Layout: Scrolling and Overflow component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117873 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
8.1
High
|
Oct 27, 2026 |
| CVE-2026-117871 |
Invalid pointer in the Graphics component
|
7.3
High
|
Oct 27, 2026 |
| CVE-2026-117872 |
Use-after-free in the JavaScript: Standard Library component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-117868 |
Sandbox escape in the DOM: Networking component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117869 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-117870 |
Use-after-free in the JavaScript Engine component
|
7.3
High
|
Oct 27, 2026 |
| CVE-2026-117866 |
Privilege escalation due to use-after-free in the Graphics: Canvas2D component
|
7.3
High
|
Oct 27, 2026 |
| CVE-2026-117867 |
Use-after-free in the Layout component
|
7.3
High
|
Oct 27, 2026 |
| CVE-2026-117863 |
Information disclosure due to uninitialized memory in the Audio/Video component
|
6.5
Medium
|
Oct 27, 2026 |
| CVE-2026-117864 |
Sandbox escape in the Form Manager component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-117865 |
Use-after-free in the JavaScript: GC component
|
6.3
Medium
|
Oct 27, 2026 |
| CVE-2026-117861 |
Sandbox escape in the DOM: Navigation component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117862 |
Privilege escalation due to incorrect boundary conditions in the Networking component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117860 |
Same-origin policy bypass in the DOM: Navigation component
|
8.1
High
|
Oct 27, 2026 |
| CVE-2026-113867 |
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas
|
9.1
Critical
|
Oct 20, 2026 |
| CVE-2026-113868 |
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was…
|
5.3
Medium
|
Oct 20, 2026 |
| CVE-2026-113869 |
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while…
|
5.4
Medium
|
Oct 20, 2026 |