PatchFirst · Latest vulnerabilities

thunderbird vulnerabilities · Page 9

Vulnerabilities published for thunderbird in the last 30 days: 127. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1193

CVE-2026-92035
Critical · CVSS 9.6EPSS 0.33%Fix available
Sandbox escape due to incorrect boundary conditions in the Graphics component
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92032
Critical · CVSS 9.6EPSS 0.32%Fix available
Sandbox escape due to invalid pointer in the Graphics component
Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92031
Medium · CVSS 6.5EPSS 0.31%Fix available
Information disclosure in the Graphics: ImageLib component
Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92030
Medium · CVSS 5.4EPSS 0.22%Fix available
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92029
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the SVG component
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92028
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92027
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the DOM: Streams component
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 18, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92026
High · CVSS 8.8EPSS 0.31%Fix available
Use-after-free in the Networking component
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 18, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92025
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the DOM: Navigation component
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 18, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92024
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the SVG component
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92023
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the XML component
Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92022
High · CVSS 8.8EPSS 0.32%Fix available
Use-after-free in the DOM: HTML Parser component
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92021
High · CVSS 8.8EPSS 0.28%Fix available
Use-after-free in the JavaScript Engine: JIT component
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92020
High · CVSS 8.8EPSS 0.26%Fix available
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92019
High · CVSS 8.1EPSS 0.31%Fix available
Mitigation bypass in the Remote Settings Client component
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92018
Critical · CVSS 9.6EPSS 0.33%Fix available
Sandbox escape in the DOM: Core & HTML component
Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92017
High · CVSS 8.8EPSS 0.24%Fix available
Privilege escalation in the DOM: Service Workers component
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92016
High · CVSS 8.8EPSS 0.31%Fix available
Use-after-free in the Disability Access APIs component
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92015
High · CVSS 8.8EPSS 0.26%Fix available
Privilege escalation in the WebExtensions component
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-92014
High · CVSS 8.8EPSS 0.24%Fix available
Privilege escalation due to incorrect boundary conditions in the Graphics component
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
thunderbird Operating systems
- Update to 1:153.3.0esr-1
Published September 15, 2026Updated September 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

thunderbird vulnerabilities · Page 9

Sandbox escape due to incorrect boundary conditions in the Graphics component

Sandbox escape due to invalid pointer in the Graphics component

Information disclosure in the Graphics: ImageLib component

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Use-after-free in the SVG component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Streams component

Use-after-free in the Networking component

Use-after-free in the DOM: Navigation component

Use-after-free in the SVG component

Use-after-free in the XML component

Use-after-free in the DOM: HTML Parser component

Use-after-free in the JavaScript Engine: JIT component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Mitigation bypass in the Remote Settings Client component

Sandbox escape in the DOM: Core & HTML component

Privilege escalation in the DOM: Service Workers component

Use-after-free in the Disability Access APIs component

Privilege escalation in the WebExtensions component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Check your server