Mozilla

Thunderbird

2081 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-84145

  • EPSS 0.39%
  • Veröffentlicht 01.09.2026 12:18:43
  • Zuletzt bearbeitet 03.09.2026 12:49:55

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could...

8.8

CVE-2026-84131

  • EPSS 0.35%
  • Veröffentlicht 01.09.2026 12:18:42
  • Zuletzt bearbeitet 03.09.2026 12:53:35

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

9.6

CVE-2026-84121

Medienbericht
  • EPSS 0.32%
  • Veröffentlicht 01.09.2026 12:18:41
  • Zuletzt bearbeitet 02.09.2026 16:36:20

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

5.4

CVE-2026-84120

Medienbericht
  • EPSS 0.22%
  • Veröffentlicht 01.09.2026 12:18:40
  • Zuletzt bearbeitet 02.09.2026 16:41:18

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

9.6

CVE-2026-84119

Medienbericht
  • EPSS 0.32%
  • Veröffentlicht 01.09.2026 12:18:39
  • Zuletzt bearbeitet 02.09.2026 16:41:53

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

9.8

CVE-2026-74985

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 12:23:41
  • Zuletzt bearbeitet 25.08.2026 15:39:27

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

9.1

CVE-2026-74986

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 12:23:41
  • Zuletzt bearbeitet 25.08.2026 16:11:58

Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

9.8

CVE-2026-74988

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 12:23:41
  • Zuletzt bearbeitet 01.09.2026 22:17:12

Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Th...

9.8

CVE-2026-74989

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 12:23:41
  • Zuletzt bearbeitet 01.09.2026 22:17:12

Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed...

8.1

CVE-2026-74981

  • EPSS 0.15%
  • Veröffentlicht 18.08.2026 12:23:40
  • Zuletzt bearbeitet 25.08.2026 16:11:37

Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.