p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de thunderbird · Página 7

Vulnerabilidades publicadas para thunderbird en los últimos 30 días: 107. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 1152

  1. CVE-2026-92022

    Alta · CVSS 8.8EPSS 0,32%Corrección disponible

    Use-after-free in the DOM: HTML Parser component

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  2. CVE-2026-92020

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  3. CVE-2026-92019

    Alta · CVSS 8.1EPSS 0,31%Corrección disponible

    Mitigation bypass in the Remote Settings Client component

    Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  4. CVE-2026-92018

    Crítica · CVSS 9.6EPSS 0,33%Corrección disponible

    Sandbox escape in the DOM: Core & HTML component

    Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  5. CVE-2026-92017

    Alta · CVSS 8.8EPSS 0,24%Corrección disponible

    Privilege escalation in the DOM: Service Workers component

    Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  6. CVE-2026-92016

    Alta · CVSS 8.8EPSS 0,31%Corrección disponible

    Use-after-free in the Disability Access APIs component

    Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  7. CVE-2026-92015

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation in the WebExtensions component

    Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  8. CVE-2026-92014

    Alta · CVSS 8.8EPSS 0,24%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics component

    Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  9. CVE-2026-92013

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  10. CVE-2026-92012

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  11. CVE-2026-92011

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  12. CVE-2026-92010

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  13. CVE-2026-92009

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  14. CVE-2026-92008

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  15. CVE-2026-92007

    Alta · CVSS 8.8EPSS 0,26%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  16. CVE-2026-92006

    Alta · CVSS 8.8EPSS 0,33%Corrección disponible

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  17. CVE-2026-92005

    Media · CVSS 5.3EPSS 0,36%Corrección disponible

    Use-after-free in the Audio/Video: Web Codecs component

    Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Actualiza a 1:140.16.0esr-1~deb13u1
    Publicación Actualización
  18. CVE-2026-84641

    Alta · CVSS 7.5EPSS 0,27%Corrección disponible

    Information disclosure due to malicious IMAP server response

    A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Actualiza a 1:140.15.0esr-1~deb13u1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →