| CVE-2026-113866 |
When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service…
|
5.9
Medium
|
Oct 20, 2026 |
| CVE-2026-113401 |
Denial-of-service in the PDF Viewer component
|
6.5
Medium
|
Oct 20, 2026 |
| CVE-2026-113400 |
Uninitialized memory in the Audio/Video: cubeb component
|
5.4
Medium
|
Oct 20, 2026 |
| CVE-2026-113399 |
Incorrect boundary conditions in the SVG component
|
9.8
Critical
|
Oct 20, 2026 |
| CVE-2026-113470 |
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
|
5.4
Medium
|
Oct 20, 2026 |
| CVE-2026-110249 |
A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an…
|
8.6
High
|
Oct 13, 2026 |
| CVE-2026-110247 |
Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks
|
8.4
High
|
Oct 13, 2026 |
| CVE-2026-109782 |
Mitigation bypass in the File Handling component
|
8.3
High
|
Oct 13, 2026 |
| CVE-2026-109783 |
Mitigation bypass in the File Handling component
|
8.3
High
|
Oct 13, 2026 |
| CVE-2026-109778 |
Privilege escalation in the WebExtensions component
|
8.8
High
|
Oct 13, 2026 |
| CVE-2026-109779 |
Race condition in the Networking: DNS component
|
4.2
Medium
|
Oct 13, 2026 |
| CVE-2026-109780 |
Mitigation bypass in the DOM: Core & HTML component
|
9.8
Critical
|
Oct 13, 2026 |
| CVE-2026-109781 |
Denial-of-service in the Printing: Output component
|
6.5
Medium
|
Oct 13, 2026 |
| CVE-2026-109773 |
Denial-of-service in the Sync component
|
6.5
Medium
|
Oct 13, 2026 |
| CVE-2026-109774 |
Invalid pointer, undefined behavior in the DOM: Notifications component
|
9.8
Critical
|
Oct 13, 2026 |
| CVE-2026-109775 |
Denial-of-service in the WebRTC component
|
6.5
Medium
|
Oct 13, 2026 |
| CVE-2026-109776 |
Race condition in the XPCOM component
|
4.2
Medium
|
Oct 13, 2026 |
| CVE-2026-109777 |
Information disclosure in the Storage: IndexedDB component
|
4.3
Medium
|
Oct 13, 2026 |
| CVE-2026-109772 |
Same-origin policy bypass in the DevTools component
|
9.1
Critical
|
Oct 13, 2026 |
| CVE-2026-109768 |
Denial-of-service in the Site Reports component
|
6.5
Medium
|
Oct 13, 2026 |
| CVE-2026-109769 |
Information disclosure in the Networking: Cache component
|
4.3
Medium
|
Oct 13, 2026 |
| CVE-2026-109770 |
Spoofing issue in the DOM: Web Serial component
|
6.1
Medium
|
Oct 13, 2026 |
| CVE-2026-109771 |
Information disclosure in the WebRTC: Networking component
|
4.3
Medium
|
Oct 13, 2026 |
| CVE-2026-109764 |
Mitigation bypass in the Enterprise Policies component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-109765 |
Race condition, use-after-free in the Graphics: Text component
|
4.2
Medium
|
Oct 13, 2026 |