InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,499
Show in the list
Critical, last 7 days
356
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product mozilla:thunderbird. Show all products

635 CVEs, showing 251 to 300PreviousPage 6 of 13Next
CVESeverityTitlePublished
CVE-2026-84134Critical 9.8Other issue in the Profile Backup component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84133Critical 9.8Site isolation issue in the DOM: Push Subscriptions component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84132High 7.5Information disclosure in the Networking: HTTP component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84130High 7.5Information disclosure in the Graphics: WebGPU component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84129Critical 9.8Site isolation issue in the DOM: Navigation component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84128High 8.8Privilege escalation in the WebDriver BiDi component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84126Medium 4.3Incorrect boundary conditions in the Layout: Grid component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84125Medium 5.4Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84124Medium 5.4Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84123High 8.8Privilege escalation due to use-after-free in the Graphics: WebGPU component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84122Medium 5.4Use-after-free in the Audio/Video component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84118Medium 5.4Use-after-free in the JavaScript: GC component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84145High 7.5Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Assigned by mozilla
Sep 1, 2026
CVE-2026-84131High 8.8Privilege escalation due to invalid pointer in the Graphics component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84121Critical 9.6Sandbox escape due to use-after-free in the DOM: Security component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84120Medium 5.4Use-after-free in the Audio/Video component
Assigned by mozilla
Sep 1, 2026
CVE-2026-84119Critical 9.6Sandbox escape due to use-after-free in the DOM: Navigation component
Assigned by mozilla
Sep 1, 2026
CVE-2026-74989Critical 9.8Internally found bugs fixed in Thunderbird 154
Assigned by mozilla
Aug 18, 2026
CVE-2026-74988Critical 9.8Internally found bugs fixed in Thunderbird ESR 153.1 and Thunderbird 154
Assigned by mozilla
Aug 18, 2026
CVE-2026-74986Critical 9.1Site isolation issue in the CSS Parsing and Computation component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74985Critical 9.8Privilege escalation in the Enterprise Policies component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74984Medium 6.8Race condition in the JavaScript Engine component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74982High 7.5Denial-of-service in the Widget component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74981High 8.1Site isolation issue in the Audio/Video: Web Codecs component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74979Critical 9.8Mitigation bypass in the Add-ons Manager component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74978High 8.1Clickjacking issue in the Widget component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74977High 7.5Integer overflow in the Graphics component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74970Medium 5.4Site isolation issue in the Graphics component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74968Medium 5.4Site isolation issue in the Graphics: WebRender component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74966High 7.5Information disclosure in the Form Autofill component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74961Critical 9.1Side-channel in the Web Audio component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74958High 7.5Information disclosure in the WebRTC component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74956Critical 9.1Same-origin policy bypass in the DOM: Service Workers component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74955High 8.8Privilege escalation in the Request Handling component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74954High 7.5Information disclosure due to side-channel in the Storage: Cache API component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74952High 8.8Privilege escalation in the Application Update component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74950High 8.8Privilege escalation in the Downloads API component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74947High 8.8Privilege escalation due to invalid pointer in the Graphics component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74938Critical 9.1Mitigation bypass in the JavaScript: GC component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74937High 8.8Use-after-free in the JavaScript: GC component
Assigned by mozilla
Aug 18, 2026
CVE-2026-75874Critical 10.0Sandbox escape in the Remote Settings Client component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74990Critical 9.8Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154
Assigned by mozilla
Aug 18, 2026
CVE-2026-74987Critical 9.8Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154
Assigned by mozilla
Aug 18, 2026
CVE-2026-74983High 8.1Mitigation bypass in the Data Loss Prevention component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74976Medium 6.5JIT miscompilation in the JavaScript Engine: JIT component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74974Medium 5.4Same-origin policy bypass in the Graphics: ImageLib component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74973Medium 4.2Race condition, use-after-free in the Graphics component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74972Medium 4.3Information disclosure in the DOM: Push Subscriptions component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74971Medium 4.3Information disclosure in the DOM: UI Events & Focus Handling component
Assigned by mozilla
Aug 18, 2026
CVE-2026-74969High 8.8Use-after-free in the Layout: Text and Fonts component
Assigned by mozilla
Aug 18, 2026
PreviousPage 6 of 13Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.