Known vulnerabilities in Mozilla Thunderbird

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1221
Public exploits: 32
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1221 known vulnerabilities: 10 critical, 549 high, 341 medium, 321 low Critical High Medium Low

Vulnerabilities (1221)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139008 - Improper Access Control
CVE-2026-16388
CWE-284 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139009 - Integer overflow
CVE-2026-16389
CWE-190 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
SB2026073045
#VU139010 - Incorrect Calculation
CVE-2026-16392
CWE-682 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139011 - Memory corruption
CVE-2026-16393
CWE-119 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139012 - Protection Mechanism Failure
CVE-2026-16394
CWE-693 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139013 - Integer overflow
CVE-2026-16395
CWE-190 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139015 - Improper Access Control
CVE-2026-16398
CWE-284 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138994 - Memory corruption
CVE-2026-16364
CWE-119 High
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138995 - Improper Privilege Management
CVE-2026-16365
CWE-269 High
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138996 - Improper Privilege Management
CVE-2026-16366
CWE-269 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138997 - NULL Pointer Dereference
CVE-2026-16367
CWE-476 High
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138998 - Protection Mechanism Failure
CVE-2026-16370
CWE-693 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU138999 - Improper Privilege Management
CVE-2026-16372
CWE-269 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139001 - Improper input validation
CVE-2026-16376
CWE-20 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139002 - Improper input validation
CVE-2026-16378
CWE-20 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139003 - Protection Mechanism Failure
CVE-2026-16380
CWE-693 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139004 - Protection Mechanism Failure
CVE-2026-16382
CWE-693 Medium
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139005 - Use of Uninitialized Resource
CVE-2026-16384
CWE-908 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139006 - Use of Uninitialized Resource
CVE-2026-16385
CWE-908 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302
#VU139007 - Use of Uninitialized Resource
CVE-2026-16386
CWE-908 Low
No
No
153.0 22.07.2026 SB2026072201
SB2026072302


Showing elements 1 - 20 out of 1221