Thunderbird
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*
part: a version: * update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Thunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/thunderbird |
purl2cpe | 2026-06-01 10:17:53.729755 |
pkg:mozilla/comm-central |
purl2cpe | 2026-06-01 10:17:53.729757 |
pkg:rpm/fedora/thunderbird |
purl2cpe | 2026-06-01 10:17:53.729759 |
pkg:rpm/opensuse/mozillathunderbird |
purl2cpe | 2026-06-01 10:17:53.729760 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8092 |
vulnerable | 2026-06-03 15:27:57.626213 |
Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2
Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
Published: 2026-05-07T12:45:06.716Z
Updated: 2026-05-19T16:48:31.003Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8091 |
vulnerable | 2026-06-03 15:27:57.625512 |
Incorrect boundary conditions in the Audio/Video: Playback component
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
Published: 2026-05-07T12:45:05.530Z
Updated: 2026-05-08T22:33:49.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8090 |
vulnerable | 2026-06-03 15:27:57.625165 |
Use-after-free in the DOM: Networking component
Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
Published: 2026-05-07T12:45:04.609Z
Updated: 2026-05-08T12:19:00.246Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7324 |
vulnerable | 2026-06-03 15:27:56.636400 |
Memory safety bugs fixed in Thunderbird 150.0.1
Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1.
Published: 2026-04-28T13:49:11.358Z
Updated: 2026-04-30T17:19:52.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7323 |
vulnerable | 2026-06-03 15:27:56.635998 |
Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
Published: 2026-04-28T13:49:10.299Z
Updated: 2026-05-07T15:22:40.336Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7322 |
vulnerable | 2026-06-03 15:27:56.635477 |
Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
Published: 2026-04-28T13:49:09.314Z
Updated: 2026-05-07T15:22:40.028Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7321 |
vulnerable | 2026-06-03 15:27:56.634692 |
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.
Published: 2026-04-28T13:49:12.432Z
Updated: 2026-04-30T17:19:49.963Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7320 |
vulnerable | 2026-06-03 15:27:56.634037 |
Information disclosure due to incorrect boundary conditions in the Audio/Video component
Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
Published: 2026-04-28T13:49:08.262Z
Updated: 2026-04-30T17:19:50.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6784 |
vulnerable | 2026-06-03 15:27:55.700617 |
Memory safety bugs fixed in Firefox 150 and Thunderbird 150
Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:13.111Z
Updated: 2026-05-27T17:06:44.028Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6783 |
vulnerable | 2026-06-03 15:27:55.700047 |
Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component
Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:12.492Z
Updated: 2026-05-27T17:11:33.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6782 |
vulnerable | 2026-06-03 15:27:55.699642 |
Information disclosure in the IP Protection component
Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:11.823Z
Updated: 2026-05-27T17:03:18.300Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6779 |
vulnerable | 2026-06-03 15:27:55.698449 |
Other issue in the JavaScript Engine component
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:09.740Z
Updated: 2026-05-26T18:49:24.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6778 |
vulnerable | 2026-06-03 15:27:55.697851 |
Invalid pointer in the Audio/Video: Playback component
Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:09.098Z
Updated: 2026-05-27T17:04:09.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6775 |
vulnerable | 2026-06-03 15:27:55.696549 |
Incorrect boundary conditions in the WebRTC component
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:06.920Z
Updated: 2026-05-27T16:54:59.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6774 |
vulnerable | 2026-06-03 15:27:55.696036 |
Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:05.957Z
Updated: 2026-05-27T17:10:07.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6773 |
vulnerable | 2026-06-03 15:27:55.695372 |
Denial-of-service due to integer overflow in the Graphics: WebGPU component
Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:41:05.301Z
Updated: 2026-05-27T16:59:46.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6760 |
vulnerable | 2026-06-03 15:27:55.686684 |
Mitigation bypass in the Networking: Cookies component
Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:40:55.131Z
Updated: 2026-05-26T17:49:39.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6755 |
vulnerable | 2026-06-03 15:27:55.683935 |
Mitigation bypass in the DOM: postMessage component
Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Published: 2026-04-21T12:40:51.382Z
Updated: 2026-05-27T16:54:24.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5735 |
vulnerable | 2026-06-03 15:26:27.544616 |
Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2
Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.
Published: 2026-04-07T12:43:15.857Z
Updated: 2026-05-10T20:09:00.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5734 |
vulnerable | 2026-06-03 15:26:27.544042 |
Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.
Published: 2026-04-07T12:43:14.833Z
Updated: 2026-05-26T18:14:09.229Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4729 |
vulnerable | 2026-06-03 15:26:25.929439 |
Memory safety bugs fixed in Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Published: 2026-03-24T12:30:43.835Z
Updated: 2026-04-13T13:51:19.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4727 |
vulnerable | 2026-06-03 15:26:25.928378 |
Denial-of-service in the Libraries component in NSS
Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Published: 2026-03-24T12:30:41.171Z
Updated: 2026-04-13T13:51:08.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4726 |
vulnerable | 2026-06-03 15:26:25.927508 |
Denial-of-service in the XML component
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Published: 2026-03-24T12:30:40.673Z
Updated: 2026-04-13T13:51:05.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4721 |
vulnerable | 2026-06-03 15:26:25.925056 |
Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:44.312Z
Updated: 2026-04-13T13:51:21.639Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4720 |
vulnerable | 2026-06-03 15:26:25.924402 |
Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:43.271Z
Updated: 2026-04-13T13:51:17.655Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4718 |
vulnerable | 2026-06-03 15:26:25.922633 |
Undefined behavior in the WebRTC: Signaling component
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:42.279Z
Updated: 2026-04-13T13:51:12.032Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4710 |
vulnerable | 2026-06-03 15:26:25.918171 |
Incorrect boundary conditions in the Audio/Video component
Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:35.852Z
Updated: 2026-04-13T13:50:46.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4694 |
vulnerable | 2026-06-03 15:26:25.910054 |
Incorrect boundary conditions, integer overflow in the Graphics component
Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:25.919Z
Updated: 2026-05-07T14:51:31.763Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4692 |
vulnerable | 2026-06-03 15:26:25.908690 |
Sandbox escape in the Responsive Design Mode component
Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:24.864Z
Updated: 2026-04-13T13:48:45.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4689 |
vulnerable | 2026-06-03 15:26:25.906666 |
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Published: 2026-03-24T12:30:23.260Z
Updated: 2026-04-13T13:48:38.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4371 |
vulnerable | 2026-06-03 15:26:25.382423 |
Out of bounds read in IMAP parsing
A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
Published: 2026-03-24T20:27:15.198Z
Updated: 2026-04-13T13:51:25.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3889 |
vulnerable | 2026-06-03 15:23:33.698634 |
Spoofing issue in Thunderbird
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
Published: 2026-03-24T20:27:14.437Z
Updated: 2026-04-13T13:51:23.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2807 |
vulnerable | 2026-06-03 15:19:24.995433 |
Memory safety bugs fixed in Firefox 148 and Thunderbird 148
Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:34.035Z
Updated: 2026-04-13T13:54:40.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2806 |
vulnerable | 2026-06-03 15:19:24.994821 |
Uninitialized memory in the Graphics: Text component
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:33.407Z
Updated: 2026-04-13T13:54:38.306Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2805 |
vulnerable | 2026-06-03 15:19:24.993896 |
Invalid pointer in the DOM: Core & HTML component
Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:32.768Z
Updated: 2026-04-13T13:54:35.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2804 |
vulnerable | 2026-06-03 15:19:24.993244 |
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:32.144Z
Updated: 2026-04-13T13:54:33.221Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2803 |
vulnerable | 2026-06-03 15:19:24.992713 |
Information disclosure, mitigation bypass in the Settings UI component
Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:31.491Z
Updated: 2026-04-13T13:54:31.077Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2802 |
vulnerable | 2026-06-03 15:19:24.992033 |
Race condition in the JavaScript: GC component
Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:30.784Z
Updated: 2026-04-13T13:54:28.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2801 |
vulnerable | 2026-06-03 15:19:24.991373 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:29.929Z
Updated: 2026-04-13T13:54:26.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2800 |
vulnerable | 2026-06-03 15:19:24.990689 |
Spoofing issue in the WebAuthn component in Firefox for Android
Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:29.312Z
Updated: 2026-04-13T13:54:24.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2799 |
vulnerable | 2026-06-03 15:19:24.989907 |
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:28.665Z
Updated: 2026-04-13T13:54:22.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2798 |
vulnerable | 2026-06-03 15:19:24.989264 |
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:28.034Z
Updated: 2026-04-13T13:54:19.927Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2797 |
vulnerable | 2026-06-03 15:19:24.988676 |
Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:27.406Z
Updated: 2026-04-13T13:54:17.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2796 |
vulnerable | 2026-06-03 15:19:24.987926 |
JIT miscompilation in the JavaScript: WebAssembly component
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:26.775Z
Updated: 2026-04-13T13:54:13.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2795 |
vulnerable | 2026-06-03 15:19:24.987350 |
Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Published: 2026-02-24T13:33:26.111Z
Updated: 2026-04-13T13:54:11.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2793 |
vulnerable | 2026-06-03 15:19:24.986206 |
Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:23.571Z
Updated: 2026-04-13T13:53:03.837Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2792 |
vulnerable | 2026-06-03 15:19:24.985044 |
Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:22.842Z
Updated: 2026-04-13T13:53:50.518Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2791 |
vulnerable | 2026-06-03 15:19:24.984286 |
Mitigation bypass in the Networking: Cache component
Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:22.237Z
Updated: 2026-04-21T02:40:55.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2790 |
vulnerable | 2026-06-03 15:19:24.983251 |
Same-origin policy bypass in the Networking: JAR component
Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:21.600Z
Updated: 2026-04-13T13:53:42.980Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2789 |
vulnerable | 2026-06-03 15:19:24.982181 |
Use-after-free in the Graphics: ImageLib component
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:20.961Z
Updated: 2026-04-13T13:53:00.745Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2788 |
vulnerable | 2026-06-03 15:19:24.974541 |
Incorrect boundary conditions in the Audio/Video: GMP component
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:20.287Z
Updated: 2026-04-21T02:40:29.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2787 |
vulnerable | 2026-06-03 15:19:24.973864 |
Use-after-free in the DOM: Window and Location component
Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:19.579Z
Updated: 2026-04-13T13:52:56.351Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2786 |
vulnerable | 2026-06-03 15:19:24.973038 |
Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:18.980Z
Updated: 2026-05-10T12:54:19.009Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2785 |
vulnerable | 2026-06-03 15:19:24.972091 |
Invalid pointer in the JavaScript Engine component
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:18.254Z
Updated: 2026-04-13T13:53:37.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2784 |
vulnerable | 2026-06-03 15:19:24.971299 |
Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:17.554Z
Updated: 2026-04-16T14:32:57.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2783 |
vulnerable | 2026-06-03 15:19:24.970411 |
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:16.921Z
Updated: 2026-04-13T13:53:30.360Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2782 |
vulnerable | 2026-06-03 15:19:24.969488 |
Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:16.262Z
Updated: 2026-04-13T13:53:27.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2781 |
vulnerable | 2026-06-03 15:19:24.968673 |
Integer overflow in the Libraries component in NSS
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
Published: 2026-02-24T13:33:15.551Z
Updated: 2026-04-21T12:40:43.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2780 |
vulnerable | 2026-06-03 15:19:24.967648 |
Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:14.850Z
Updated: 2026-04-13T13:53:23.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2779 |
vulnerable | 2026-06-03 15:19:24.966927 |
Incorrect boundary conditions in the Networking: JAR component
Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:14.195Z
Updated: 2026-04-16T14:32:33.729Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2778 |
vulnerable | 2026-06-03 15:19:24.966097 |
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:13.564Z
Updated: 2026-04-16T14:32:14.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2777 |
vulnerable | 2026-06-03 15:19:24.965051 |
Privilege escalation in the Messaging System component
Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:12.869Z
Updated: 2026-04-13T13:52:51.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2776 |
vulnerable | 2026-06-03 15:19:24.964376 |
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:12.247Z
Updated: 2026-04-16T14:31:49.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2775 |
vulnerable | 2026-06-03 15:19:24.963570 |
Mitigation bypass in the DOM: HTML Parser component
Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:11.553Z
Updated: 2026-04-16T14:31:30.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2774 |
vulnerable | 2026-06-03 15:19:24.962827 |
Integer overflow in the Audio/Video component
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:10.821Z
Updated: 2026-04-13T13:52:44.181Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2773 |
vulnerable | 2026-06-03 15:19:24.961994 |
Incorrect boundary conditions in the Web Audio component
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:10.177Z
Updated: 2026-04-16T14:31:07.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2772 |
vulnerable | 2026-06-03 15:19:24.961110 |
Use-after-free in the Audio/Video: Playback component
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:09.181Z
Updated: 2026-04-13T13:52:39.456Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2771 |
vulnerable | 2026-06-03 15:19:24.960293 |
Undefined behavior in the DOM: Core & HTML component
Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:08.538Z
Updated: 2026-04-16T14:30:39.225Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2770 |
vulnerable | 2026-06-03 15:19:24.959289 |
Use-after-free in the DOM: Bindings (WebIDL) component
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:07.898Z
Updated: 2026-04-13T13:52:34.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2769 |
vulnerable | 2026-06-03 15:19:24.958447 |
Use-after-free in the Storage: IndexedDB component
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:06.912Z
Updated: 2026-04-13T13:52:32.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2768 |
vulnerable | 2026-06-03 15:19:24.957614 |
Sandbox escape in the Storage: IndexedDB component
Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:06.258Z
Updated: 2026-04-13T13:53:18.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2767 |
vulnerable | 2026-06-03 15:19:24.956749 |
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:05.551Z
Updated: 2026-04-13T13:53:16.679Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2766 |
vulnerable | 2026-06-03 15:19:24.955760 |
Use-after-free in the JavaScript Engine: JIT component
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:04.946Z
Updated: 2026-04-16T14:28:29.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2765 |
vulnerable | 2026-06-03 15:19:24.952783 |
Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:03.943Z
Updated: 2026-04-16T14:27:42.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2764 |
vulnerable | 2026-06-03 15:19:24.952080 |
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:03.207Z
Updated: 2026-04-16T14:27:18.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2763 |
vulnerable | 2026-06-03 15:19:24.951113 |
Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:02.514Z
Updated: 2026-04-15T15:39:44.974Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2762 |
vulnerable | 2026-06-03 15:19:24.950295 |
Integer overflow in the JavaScript: Standard Library component
Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:01.761Z
Updated: 2026-04-15T15:39:20.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2761 |
vulnerable | 2026-06-03 15:19:24.949545 |
Sandbox escape in the Graphics: WebRender component
Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:01.011Z
Updated: 2026-04-15T15:38:48.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2760 |
vulnerable | 2026-06-03 15:19:24.948723 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:33:00.290Z
Updated: 2026-04-15T15:38:19.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2759 |
vulnerable | 2026-06-03 15:19:24.947853 |
Incorrect boundary conditions in the Graphics: ImageLib component
Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:32:59.173Z
Updated: 2026-04-15T15:38:00.858Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2758 |
vulnerable | 2026-06-03 15:19:24.946781 |
Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:32:58.501Z
Updated: 2026-04-15T15:37:39.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2757 |
vulnerable | 2026-06-03 15:19:24.945670 |
Incorrect boundary conditions in the WebRTC: Audio/Video component
Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Published: 2026-02-24T13:32:57.740Z
Updated: 2026-04-14T15:11:01.347Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0892 |
vulnerable | 2026-06-03 15:14:43.147775 |
Memory safety bugs fixed in Firefox 147 and Thunderbird 147
Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
Published: 2026-01-13T13:30:59.874Z
Updated: 2026-04-13T13:52:12.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0891 |
vulnerable | 2026-06-03 15:14:43.147120 |
Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:59.454Z
Updated: 2026-04-13T13:52:10.334Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0890 |
vulnerable | 2026-06-03 15:14:43.146540 |
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:59.089Z
Updated: 2026-04-13T13:52:07.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0889 |
vulnerable | 2026-06-03 15:14:43.145958 |
Denial-of-service in the DOM: Service Workers component
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
Published: 2026-01-13T13:30:58.675Z
Updated: 2026-04-13T13:52:05.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0888 |
vulnerable | 2026-06-03 15:14:43.145369 |
Information disclosure in the XML component
Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
Published: 2026-01-13T13:30:58.296Z
Updated: 2026-04-13T13:52:02.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0887 |
vulnerable | 2026-06-03 15:14:43.144735 |
Clickjacking issue, information disclosure in the PDF Viewer component
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:57.847Z
Updated: 2026-04-13T13:51:59.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0886 |
vulnerable | 2026-06-03 15:14:43.143777 |
Incorrect boundary conditions in the Graphics component
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:57.400Z
Updated: 2026-04-13T13:51:57.056Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0885 |
vulnerable | 2026-06-03 15:14:43.143178 |
Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:56.939Z
Updated: 2026-04-13T13:51:54.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0884 |
vulnerable | 2026-06-03 15:14:43.142531 |
Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:56.543Z
Updated: 2026-04-13T13:51:52.987Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0883 |
vulnerable | 2026-06-03 15:14:43.141345 |
Information disclosure in the Networking component
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:56.043Z
Updated: 2026-04-13T13:51:51.032Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0882 |
vulnerable | 2026-06-03 15:14:43.140715 |
Use-after-free in the IPC component
Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:55.562Z
Updated: 2026-04-13T13:51:48.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0881 |
vulnerable | 2026-06-03 15:14:43.140086 |
Sandbox escape in the Messaging System component
Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
Published: 2026-01-13T13:30:55.122Z
Updated: 2026-04-13T13:51:46.729Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0880 |
vulnerable | 2026-06-03 15:14:43.139401 |
Sandbox escape due to integer overflow in the Graphics component
Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:54.679Z
Updated: 2026-04-13T13:51:44.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0879 |
vulnerable | 2026-06-03 15:14:43.138674 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:54.207Z
Updated: 2026-04-13T13:51:42.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0878 |
vulnerable | 2026-06-03 15:14:43.138116 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:53.697Z
Updated: 2026-04-13T13:51:40.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0877 |
vulnerable | 2026-06-03 15:14:43.137518 |
Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Published: 2026-01-13T13:30:52.979Z
Updated: 2026-04-13T13:51:38.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0818 |
vulnerable | 2026-06-03 15:14:42.913623 |
CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email. This vulnerability was fixed in Thunderbird 147.0.1 and Thunderbird 140.7.1.
Published: 2026-01-28T07:39:17.467Z
Updated: 2026-04-13T13:52:14.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9187 |
vulnerable | 2026-06-03 15:13:45.627698 |
Memory safety bugs fixed in Firefox 142 and Thunderbird 142
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
Published: 2025-08-19T20:33:57.516Z
Updated: 2026-04-13T14:29:49.002Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9185 |
vulnerable | 2026-06-03 15:13:45.623095 |
Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
Published: 2025-08-19T20:33:55.556Z
Updated: 2026-04-13T14:25:52.926Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9184 |
vulnerable | 2026-06-03 15:13:45.622485 |
Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.
Published: 2025-08-19T20:33:58.037Z
Updated: 2026-04-13T14:28:41.568Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9182 |
vulnerable | 2026-06-03 15:13:45.621065 |
Denial-of-service due to out-of-memory in the Graphics: WebRender component
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.
Published: 2025-08-19T20:33:56.512Z
Updated: 2026-04-13T14:28:37.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9181 |
vulnerable | 2026-06-03 15:13:45.620088 |
Uninitialized memory in the JavaScript Engine component
Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
Published: 2025-08-19T20:33:55.063Z
Updated: 2026-04-13T14:25:51.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9180 |
vulnerable | 2026-06-03 15:13:45.616216 |
Same-origin policy bypass in the Graphics: Canvas2D component
Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
Published: 2025-08-19T20:33:54.532Z
Updated: 2026-04-13T14:25:49.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9179 |
vulnerable | 2026-06-03 15:13:45.615450 |
Sandbox escape due to invalid pointer in the Audio/Video: GMP component
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
Published: 2025-08-19T20:33:53.949Z
Updated: 2026-04-13T14:25:47.601Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8044 |
vulnerable | 2026-06-03 15:13:42.094419 |
Memory safety bugs fixed in Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141 and Thunderbird 141.
Published: 2025-07-22T20:49:29.263Z
Updated: 2026-04-13T14:30:58.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8043 |
vulnerable | 2026-06-03 15:13:42.093839 |
Incorrect URL truncation
Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.
Published: 2025-07-22T20:49:28.983Z
Updated: 2026-04-13T14:31:33.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8040 |
vulnerable | 2026-06-03 15:13:42.074495 |
Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
Published: 2025-07-22T20:49:28.310Z
Updated: 2026-04-13T14:27:10.161Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8039 |
vulnerable | 2026-06-03 15:13:42.073848 |
Search terms persisted in URL bar
In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
Published: 2025-07-22T20:49:27.191Z
Updated: 2026-04-13T14:27:04.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8038 |
vulnerable | 2026-06-03 15:13:42.072970 |
CSP frame-src was not correctly enforced for paths
Thunderbird ignored paths when checking the validity of navigations in a frame. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
Published: 2025-07-22T20:49:26.764Z
Updated: 2026-04-13T14:27:01.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8037 |
vulnerable | 2026-06-03 15:13:42.072215 |
Nameless cookies shadow secure cookies
Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
Published: 2025-07-22T20:49:25.621Z
Updated: 2026-04-13T14:26:53.773Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8036 |
vulnerable | 2026-06-03 15:13:42.071329 |
DNS rebinding circumvents CORS
Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
Published: 2025-07-22T20:49:25.303Z
Updated: 2026-04-13T14:26:51.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8035 |
vulnerable | 2026-06-03 15:13:42.070684 |
Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:28.660Z
Updated: 2026-04-13T14:27:11.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8034 |
vulnerable | 2026-06-03 15:13:42.069740 |
Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:27.749Z
Updated: 2026-04-13T14:27:08.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8033 |
vulnerable | 2026-06-03 15:13:42.068822 |
Incorrect JavaScript state machine for generators
The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:27.477Z
Updated: 2026-04-13T14:27:06.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8032 |
vulnerable | 2026-06-03 15:13:42.068042 |
XSLT documents could bypass CSP
XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:26.507Z
Updated: 2026-04-13T14:26:59.396Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8031 |
vulnerable | 2026-06-03 15:13:42.067124 |
Incorrect URL stripping in CSP reports
The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:26.243Z
Updated: 2026-04-13T14:26:57.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8030 |
vulnerable | 2026-06-03 15:13:42.066087 |
Potential user-assisted code execution in “Copy as cURL” command
Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:25.931Z
Updated: 2026-04-13T14:26:55.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8029 |
vulnerable | 2026-06-03 15:13:42.065199 |
javascript: URLs executed on object and embed tags
Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:24.898Z
Updated: 2026-04-13T14:26:50.157Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8028 |
vulnerable | 2026-06-03 15:13:42.064288 |
Large branch table could lead to truncated instruction
On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:24.592Z
Updated: 2026-04-13T14:26:48.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8027 |
vulnerable | 2026-06-03 15:13:42.063327 |
JavaScript engine only wrote partial return value to stack
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
Published: 2025-07-22T20:49:24.039Z
Updated: 2026-04-13T14:26:46.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5986 |
vulnerable | 2026-06-03 15:07:55.213443 |
Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. This vulnerability was fixed in Thunderbird 128.11.1 and Thunderbird 139.0.2.
Published: 2025-06-11T12:07:50.430Z
Updated: 2026-04-13T14:28:34.275Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5262 |
vulnerable | 2026-06-03 15:06:27.426939 |
Details available
A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11.
Published: 2025-05-27T12:29:21.813Z
Updated: 2025-08-25T18:18:53.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4919 |
vulnerable | 2026-06-03 15:01:48.968128 |
Out-of-bounds access when optimizing linear sums
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.
Published: 2025-05-17T21:07:27.734Z
Updated: 2026-04-13T14:25:56.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4918 |
vulnerable | 2026-06-03 15:01:48.967429 |
Out-of-bounds access when resolving Promise objects
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.
Published: 2025-05-17T21:07:26.745Z
Updated: 2026-04-13T14:25:54.968Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4092 |
vulnerable | 2026-06-03 15:01:46.724921 |
Memory safety bugs fixed in Firefox 138 and Thunderbird 138
Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:49.479Z
Updated: 2026-04-13T14:28:52.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4091 |
vulnerable | 2026-06-03 15:01:46.724507 |
Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.
Published: 2025-04-29T13:13:48.089Z
Updated: 2026-04-13T14:27:22.909Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4090 |
vulnerable | 2026-06-03 15:01:46.723864 |
Leaked library paths in Thunderbird for Android
A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:46.677Z
Updated: 2026-04-13T14:28:50.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4089 |
vulnerable | 2026-06-03 15:01:46.723550 |
Potential local code execution in "copy as cURL" command
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:45.152Z
Updated: 2026-04-13T14:28:48.766Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4088 |
vulnerable | 2026-06-03 15:01:46.723043 |
Cross-site request forgery via storage access API redirects
A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:43.684Z
Updated: 2026-04-13T14:28:47.062Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4087 |
vulnerable | 2026-06-03 15:01:46.722471 |
Unsafe attribute access during XPath parsing
A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.
Published: 2025-04-29T13:13:42.302Z
Updated: 2026-04-13T14:27:21.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4086 |
vulnerable | 2026-06-03 15:01:46.721638 |
Specially crafted filename could be used to obscure download type
A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.
*This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:40.899Z
Updated: 2026-04-13T14:28:45.158Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4085 |
vulnerable | 2026-06-03 15:01:46.721196 |
Potential information leakage and privilege escalation in UITour actor
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Published: 2025-04-29T13:13:39.469Z
Updated: 2026-04-13T14:28:43.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4083 |
vulnerable | 2026-06-03 15:01:46.720224 |
Process isolation bypass using "javascript:" URI links in cross-origin frames
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
Published: 2025-04-29T13:13:36.578Z
Updated: 2026-04-13T14:27:17.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4082 |
vulnerable | 2026-06-03 15:01:46.719407 |
WebGL shader attribute memory corruption in Thunderbird for macOS
Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.
*This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
Published: 2025-04-29T13:13:35.242Z
Updated: 2026-04-13T14:27:15.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1930 |
vulnerable | 2026-06-03 14:59:06.827906 |
AudioIPC StreamData could trigger a use-after-free in the Browser process
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
Published: 2025-03-04T13:31:22.418Z
Updated: 2026-04-13T14:27:31.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1020 |
vulnerable | 2026-06-03 14:58:57.579142 |
Memory safety bugs fixed in Firefox 135 and Thunderbird 135
Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Published: 2025-02-04T13:58:56.390Z
Updated: 2026-04-13T14:25:25.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1019 |
vulnerable | 2026-06-03 14:58:57.578810 |
Fullscreen notification not properly displayed
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Published: 2025-02-04T13:58:54.064Z
Updated: 2026-04-13T14:25:16.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1018 |
vulnerable | 2026-06-03 14:58:57.578093 |
Fullscreen notification is not displayed when fullscreen is re-requested
The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Published: 2025-02-04T13:58:52.807Z
Updated: 2026-04-13T14:25:10.866Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1017 |
vulnerable | 2026-06-03 14:58:57.577510 |
Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:56.028Z
Updated: 2026-04-13T14:25:23.811Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1016 |
vulnerable | 2026-06-03 14:58:57.576925 |
Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:55.672Z
Updated: 2026-04-13T14:25:22.068Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1014 |
vulnerable | 2026-06-03 14:58:57.575468 |
Certificate length was not properly checked
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:54.940Z
Updated: 2026-04-13T14:25:20.384Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1012 |
vulnerable | 2026-06-03 14:58:57.574023 |
Use-after-free during concurrent delazification
A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:53.687Z
Updated: 2026-04-13T14:25:14.718Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1011 |
vulnerable | 2026-06-03 14:58:57.573321 |
A bug in WebAssembly code generation could result in a crash
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:53.239Z
Updated: 2026-04-13T14:25:12.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1010 |
vulnerable | 2026-06-03 14:58:57.572648 |
Use-after-free in Custom Highlight
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:52.357Z
Updated: 2026-04-13T14:25:08.956Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1009 |
vulnerable | 2026-06-03 14:58:57.571959 |
Use-after-free in XSLT
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Published: 2025-02-04T13:58:51.928Z
Updated: 2026-04-13T14:25:07.080Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14332 |
vulnerable | 2026-06-03 14:58:55.165758 |
Memory safety bugs fixed in Firefox 146 and Thunderbird 146
Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
Published: 2025-12-09T13:38:08.758Z
Updated: 2026-04-13T14:28:06.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14331 |
vulnerable | 2026-06-03 14:58:55.165179 |
Same-origin policy bypass in the Request Handling component
Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:38:07.191Z
Updated: 2026-04-13T14:25:43.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14330 |
vulnerable | 2026-06-03 14:58:55.164350 |
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:38:05.995Z
Updated: 2026-04-13T14:25:41.657Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14329 |
vulnerable | 2026-06-03 14:58:55.163626 |
Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:38:04.796Z
Updated: 2026-04-13T14:25:39.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14328 |
vulnerable | 2026-06-03 14:58:55.162791 |
Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:38:03.509Z
Updated: 2026-04-13T14:25:37.532Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14327 |
vulnerable | 2026-06-03 14:58:55.162209 |
Spoofing issue in the Downloads Panel component
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
Published: 2025-12-09T13:38:02.260Z
Updated: 2026-04-13T14:24:13.332Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14326 |
vulnerable | 2026-06-03 14:58:55.161792 |
Use-after-free in the Audio/Video: GMP component
Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
Published: 2025-12-09T13:38:00.695Z
Updated: 2026-04-13T14:28:03.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14325 |
vulnerable | 2026-06-03 14:58:55.161303 |
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:37:58.843Z
Updated: 2026-04-13T14:25:35.644Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14324 |
vulnerable | 2026-06-03 14:58:55.160549 |
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:37:57.533Z
Updated: 2026-04-13T14:25:33.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14323 |
vulnerable | 2026-06-03 14:58:55.159971 |
Privilege escalation in the DOM: Notifications component
Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:37:56.358Z
Updated: 2026-04-13T14:25:31.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14322 |
vulnerable | 2026-06-03 14:58:55.159386 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:37:55.159Z
Updated: 2026-04-13T14:25:29.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14321 |
vulnerable | 2026-06-03 14:58:55.158703 |
Use-after-free in the WebRTC: Signaling component
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Published: 2025-12-09T13:37:53.872Z
Updated: 2026-04-13T14:25:27.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11715 |
vulnerable | 2026-06-03 14:58:42.947901 |
Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
Published: 2025-10-14T12:27:36.209Z
Updated: 2026-04-13T14:29:45.602Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10537 |
vulnerable | 2026-06-03 14:58:34.259200 |
Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.
Published: 2025-09-16T12:26:37.029Z
Updated: 2026-04-13T14:28:25.818Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0510 |
vulnerable | 2026-06-03 14:58:32.346910 |
Address of e-mail sender can be spoofed by malicious email
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.
Published: 2025-02-04T13:58:55.320Z
Updated: 2026-04-13T14:30:38.919Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.