PatchFirst · Latest vulnerabilities

thunderbird vulnerabilities · Page 11

Vulnerabilities published for thunderbird in the last 30 days: 258. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1318

CVE-2026-109730
High · CVSS 8.8EPSS 0.36%Fix available
Integer overflow in the Graphics component
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 15, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109729
Medium · CVSS 5.4EPSS 0.24%Fix available
Use-after-free in the JavaScript Engine: JIT component
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109728
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the DOM: Animation component
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109727
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the Audio/Video component
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109726
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the SVG component
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109725
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109722
High · CVSS 8.1EPSS 0.31%Fix available
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109719
Medium · CVSS 4.2EPSS 0.17%Fix available
Race condition, use-after-free in the Graphics: CanvasWebGL component
Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109718
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the XML component
Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109716
High · CVSS 8.1EPSS 0.31%Fix available
Incorrect boundary conditions in the JavaScript Engine component
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109715
High · CVSS 8.1EPSS 0.31%Fix available
Incorrect boundary conditions in the JavaScript Engine component
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109712
High · CVSS 7.1EPSS 0.22%Fix available
Sandbox escape due to uninitialized memory in the Graphics component
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109710
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the Graphics: Text component
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109706
Medium · CVSS 5.4EPSS 0.23%Fix available
Use-after-free in the Storage: IndexedDB component
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
thunderbird Operating systems
- Update to 1:153.5.1esr-1~deb12u1
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-106016
Critical · CVSS 9.8EPSS 0.32%No fix published
Mitigation bypass in the File Handling component
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
thunderbird Operating systems
Published October 6, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-103500
Medium · CVSS 6.3EPSS 0.28%Fix available
Heap buffer overflow opening large email
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
thunderbird Operating systems
- Update to 1:140.17.0esr-1~deb12u1
Published September 30, 2026Updated October 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100832
High · CVSS 8.8EPSS 0.24%Fix available
Use-after-free in the Graphics: Canvas2D component
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.
thunderbird Operating systems
- Update to 1:140.17.0esr-1~deb12u1
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100821
Medium · CVSS 4.7EPSS 0.14%Fix available
Site isolation issue in the Panning and Zooming component
Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
thunderbird Operating systems
- Update to 1:140.17.0esr-1~deb12u1
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100820
High · CVSS 8.8EPSS 0.24%Fix available
Privilege escalation in the Address Bar component
Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
thunderbird Operating systems
- Update to 1:140.17.0esr-1~deb12u1
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100819
Critical · CVSS 9.6EPSS 0.26%Fix available
Sandbox escape due to incorrect boundary conditions in the XPCOM component
Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
thunderbird Operating systems
- Update to 1:140.17.0esr-1~deb12u1
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

thunderbird vulnerabilities · Page 11

Integer overflow in the Graphics component

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the DOM: Animation component

Use-after-free in the Audio/Video component

Use-after-free in the SVG component

Use-after-free in the DOM: Core & HTML component

JIT miscompilation in the JavaScript Engine: JIT component

Race condition, use-after-free in the Graphics: CanvasWebGL component

Use-after-free in the XML component

Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component

Sandbox escape due to uninitialized memory in the Graphics component

Use-after-free in the Graphics: Text component

Use-after-free in the Storage: IndexedDB component

Mitigation bypass in the File Handling component

Heap buffer overflow opening large email

Use-after-free in the Graphics: Canvas2D component

Site isolation issue in the Panning and Zooming component

Privilege escalation in the Address Bar component

Sandbox escape due to incorrect boundary conditions in the XPCOM component

Check your server