InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product mozilla:thunderbird. Show all products

635 CVEs, showing 1 to 50Page 1 of 13Next
CVESeverityTitlePublished
CVE-2026-110249Not yet scoredDenial-of-service in the Exchange email component
Assigned by mozilla
Oct 13, 2026
CVE-2026-110247Not yet scoredInteger overflow in libmime buffer growth could lead to heap corruption
Assigned by mozilla
Oct 13, 2026
CVE-2026-109783Not yet scoredMitigation bypass in the File Handling component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109782Not yet scoredMitigation bypass in the File Handling component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109781Medium 6.5Denial-of-service in the Printing: Output component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109780Not yet scoredMitigation bypass in the DOM: Core & HTML component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109779Medium 4.2Race condition in the Networking: DNS component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109778High 8.8Privilege escalation in the WebExtensions component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109777Medium 4.3Information disclosure in the Storage: IndexedDB component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109776Medium 4.2Race condition in the XPCOM component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109775Medium 6.5Denial-of-service in the WebRTC component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109774Not yet scoredInvalid pointer, undefined behavior in the DOM: Notifications component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109773Medium 6.5Denial-of-service in the Sync component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109772Not yet scoredSame-origin policy bypass in the DevTools component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109771Medium 4.3Information disclosure in the WebRTC: Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109770Not yet scoredSpoofing issue in the DOM: Web Serial component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109769Medium 4.3Information disclosure in the Networking: Cache component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109768Medium 6.5Denial-of-service in the Site Reports component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109767Medium 4.3Information disclosure in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109766Not yet scoredMitigation bypass in the Enterprise Policies component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109765Medium 4.2Race condition, use-after-free in the Graphics: Text component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109764Not yet scoredMitigation bypass in the Enterprise Policies component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109763Not yet scoredMitigation bypass in the File Handling component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109762Not yet scoredIncorrect boundary conditions in the SVG component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109761Medium 5.4Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109760Not yet scoredMitigation bypass in the Networking: HTTP component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109759Not yet scoredSite isolation issue in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109757High 8.3Sandbox escape due to race condition in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109756High 8.8Privilege escalation in the DOM: Navigation component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109755Critical 9.6Sandbox escape in the DOM: Content Processes component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109754Not yet scoredIncorrect boundary conditions in the DOM: Editor component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109752Medium 5.4Use-after-free in the DOM: Workers component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109751Medium 4.3Information disclosure in the Networking component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109750Not yet scoredSite isolation issue in the DOM: Web Authentication component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109749Medium 5.4Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109748Medium 5.4Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109747Not yet scoredOther issue in the Address Bar component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109746Not yet scoredMitigation bypass in the DOM: Security component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109745Not yet scoredSandbox escape due to uninitialized memory in the DOM: Web Serial component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109744Not yet scoredOther issue in the DOM: File component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109743High 8.8Privilege escalation in the Panning and Zooming component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109742Medium 4.3Information disclosure in the PDF Viewer component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109741Medium 5.4Use-after-free in the Storage: Bucket File System component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109740Not yet scoredSandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109739High 8.8Privilege escalation in the WebExtensions component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109738Medium 5.4Use-after-free in the Audio/Video: Playback component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109737Not yet scoredMitigation bypass in the Enterprise Policies component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109736Not yet scoredFrame poisoning in the Layout component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109735Medium 5.4Use-after-free in the DOM: Animation component
Assigned by mozilla
Oct 13, 2026
CVE-2026-109734Not yet scoredMitigation bypass in the DOM: Security component
Assigned by mozilla
Oct 13, 2026
Page 1 of 13Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.