InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,432 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,432
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product mozilla:thunderbird. Show all products

635 CVEs, showing 51 to 100PreviousPage 2 of 13Next
CVESeverityTitlePublished
CVE-2026-109731Not yet scoredIncorrect boundary conditions in the Graphics: Canvas2D component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109724Medium 5.4Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109723Medium 5.4Integer overflow in the Layout: Text and Fonts component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109721Not yet scoredIncorrect boundary conditions in the JavaScript Engine: JIT component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109720Not yet scoredJIT miscompilation in the JavaScript: WebAssembly component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109717Medium 5.4Use-after-free in the DOM: Bindings (WebIDL) component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109714Medium 5.4Incorrect boundary conditions in the Layout component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109713Medium 5.4Use-after-free in the Crash Reporting component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109711Medium 5.4Use-after-free in the Graphics: Canvas2D component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109709High 8.8Information disclosure, privilege escalation in the Security: Process Sandboxing component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109708Critical 9.6Sandbox escape due to incorrect boundary conditions in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109707Critical 9.6Sandbox escape due to use-after-free in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109705Critical 9.6Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109704High 8.8Privilege escalation in the Application Update component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109753High 8.1Incorrect boundary conditions in the Layout component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109733High 8.1JIT miscompilation in the JavaScript Engine: JIT component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109732Medium 5.4Use-after-free in the DOM: Streams component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109730High 8.8Integer overflow in the Graphics component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109729Medium 5.4Use-after-free in the JavaScript Engine: JIT component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109728Medium 5.4Use-after-free in the DOM: Animation component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109727Medium 5.4Use-after-free in the Audio/Video component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109726Medium 5.4Use-after-free in the SVG component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109725Medium 5.4Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109722High 8.1JIT miscompilation in the JavaScript Engine: JIT component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109719Medium 4.2Race condition, use-after-free in the Graphics: CanvasWebGL component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109718Medium 5.4Use-after-free in the XML component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109716High 8.1Incorrect boundary conditions in the JavaScript Engine component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109715High 8.1Incorrect boundary conditions in the JavaScript Engine component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109712High 7.1Sandbox escape due to uninitialized memory in the Graphics component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109710Medium 5.4Use-after-free in the Graphics: Text component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109706Medium 5.4Use-after-free in the Storage: IndexedDB component
Assigned by mozilla
Oct 13, 2026
CVE-2026-106016Critical 9.8Mitigation bypass in the File Handling component
Assigned by mozilla
Oct 6, 2026
CVE-2026-103500Medium 6.3Heap buffer overflow opening large email
Assigned by mozilla
Sep 30, 2026
CVE-2026-100832High 8.8Use-after-free in the Graphics: Canvas2D component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100831High 8.8Use-after-free in the DOM: UI Events & Focus Handling component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100830High 8.1Mitigation bypass in the DOM: Navigation component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100829Critical 9.6Mitigation bypass in the DOM: Security component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100828Critical 9.6Mitigation bypass in the Bookmarks & History component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100826Medium 6.5Denial-of-service in the Storage: StorageManager component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100825High 8.8Use-after-free in the JavaScript Engine: JIT component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100824High 8.8Privilege escalation in the Places component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100822Medium 5.4Spoofing issue in the Networking: HTTP component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100821Medium 4.7Site isolation issue in the Panning and Zooming component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100820High 8.8Privilege escalation in the Address Bar component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100819Critical 9.6Sandbox escape due to incorrect boundary conditions in the XPCOM component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100818Critical 9.6Sandbox escape due to use-after-free in the Widget: Gtk component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100817Medium 5.4Other issue in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100816High 8.1Site isolation issue in the DOM: Networking component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100815High 8.8Use-after-free in the CSS Parsing and Computation component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100814High 8.8Incorrect boundary conditions in the JavaScript Engine: JIT component
Assigned by mozilla
Sep 29, 2026
PreviousPage 2 of 13Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.