InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,496
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product mozilla:thunderbird. Show all products

635 CVEs, showing 101 to 150PreviousPage 3 of 13Next
CVESeverityTitlePublished
CVE-2026-100813High 8.8Invalid pointer in the JavaScript Engine: JIT component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100812Medium 6.5Denial-of-service in the Graphics component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100811Critical 9.6Sandbox escape due to use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100810Critical 9.8Other issue in the DevTools component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100809High 8.1Same-origin policy bypass in the DevTools component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100808High 8.8Mitigation bypass in the DOM: Service Workers component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100807High 8.8Privilege escalation in the DOM: Service Workers component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100806Medium 4.3Uninitialized memory in the Graphics: WebGPU component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100805High 7.5Race condition, use-after-free in the Audio/Video component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100804Critical 9.6Sandbox escape due to use-after-free in the Preferences: Backend component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100803High 8.1Same-origin policy bypass in the WebExtensions component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100802Medium 4.3Uninitialized memory in the Graphics: WebGPU component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100801High 8.8Privilege escalation in the DLL Services component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100800Critical 9.6Sandbox escape due to use-after-free in the Disability Access APIs component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100799Medium 4.3Uninitialized memory in the Graphics: WebGPU component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100798High 8.1Cryptography misuse in Storage: Quota Manager component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100797High 8.8Privilege escalation due to use-after-free in the Graphics: WebRender component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100796High 8.8Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100795Medium 6.5Denial-of-service in the Networking component
Assigned by mozilla
Sep 29, 2026
CVE-2026-96869Medium 4.3Information disclosure in the Networking component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100794Critical 9.6Sandbox escape due to incorrect boundary conditions in the Internationalization component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100793Medium 6.5JIT miscompilation in the JavaScript Engine component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100792High 7.1JIT miscompilation in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100791High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100790High 8.8Use-after-free in the XSLT component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100789High 8.8Use-after-free in the Graphics: Canvas2D component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100788Critical 9.8Invalid pointer in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100787Critical 9.6Sandbox escape in the XUL component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100786Critical 9.6Sandbox escape due to use-after-free in the Graphics component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100785High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100784High 8.8Use-after-free in the Layout: Text and Fonts component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100783Medium 4.3Uninitialized memory in the Audio/Video component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100782High 8.8Privilege escalation due to incorrect boundary conditions in the Graphics component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100781Critical 9.6Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100780High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100779High 8.8Use-after-free in the XSLT component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100778Critical 9.6Sandbox escape due to use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100777High 8.8Use-after-free in the Graphics: Canvas2D component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100776High 8.8Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100775Critical 9.6Sandbox escape in the Graphics component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100774High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100773High 8.8Use-after-free in the Storage: IndexedDB component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100772High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100771High 8.1Undefined behavior in the DOM: Streams component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100770Critical 9.6Sandbox escape due to use-after-free in the DOM: Content Processes component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100769High 8.8Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100768High 8.8Use-after-free in the Graphics: WebGPU component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100767High 8.8Use-after-free in the Networking: Cache component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100766Medium 4.3Information disclosure in the Networking: JAR component
Assigned by mozilla
Sep 29, 2026
CVE-2026-100765High 8.8Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 29, 2026
PreviousPage 3 of 13Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.