p PatchFirst

PatchFirst · Latest vulnerabilities

thunderbird vulnerabilities · Page 16

Vulnerabilities published for thunderbird in the last 30 days: 278. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 1344

  1. CVE-2026-92052

    High · CVSS 8.8EPSS 0.24%Fix available

    Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

    Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

    • Update to 1:153.3.0esr-1
    Published Updated
  2. CVE-2026-92035

    Critical · CVSS 9.6EPSS 0.33%Fix available

    Sandbox escape due to incorrect boundary conditions in the Graphics component

    Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Update to 1:153.3.0esr-1
    Published Updated
  3. CVE-2026-92030

    Medium · CVSS 5.4EPSS 0.22%Fix available

    Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

    Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 1:153.3.0esr-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →