Known vulnerabilities in Mozilla Thunderbird 128.1.1 - page 7

Vendor: Mozilla
Version: 128.1.1
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 363
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Mozilla Thunderbird version 128.1.1 Mozilla Thunderbird 128.1.1 is affected by 363 vulnerabilities: 1 critical, 193 high, 108 medium, 61 low Critical High Medium Low

Vulnerabilities (363)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124597 - Out-of-bounds read
CVE-2026-4371
CWE-125 Low
No
No
140.9.0, 149.0 25.03.2026 SB20260325201
SB20260325202
SB2026032701
and 13 more
#VU124596 - Multiple Interpretations of UI Input
CVE-2026-3889
CWE-450 Low
No
No
140.9.0, 149.0 25.03.2026 SB20260325201
SB20260325202
SB2026032701
and 13 more
#VU124320 - Out-of-bounds read
CVE-2026-4714
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124322 - Out-of-bounds read
CVE-2026-4716
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124323 - Improper Privilege Management
CVE-2026-4717
CWE-269 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124324 - Type conversion
CVE-2026-4718
CWE-704 Medium
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124325 - Out-of-bounds read
CVE-2026-4719
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124326 - Out-of-bounds write
CVE-2026-4720
CWE-787 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124313 - Resource exhaustion
CVE-2026-4704
CWE-400 Medium
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124314 - Type conversion
CVE-2026-4705
CWE-704 Medium
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124317 - Use After Free
CVE-2026-4711
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 33 more
#VU124318 - Exposure of sensitive information to an unauthorized actor
CVE-2026-4712
CWE-200 Low
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 33 more
#VU124319 - Out-of-bounds read
CVE-2026-4713
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124306 - Out-of-bounds write
CVE-2026-4721
CWE-787 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124303 - Out-of-bounds read
CVE-2026-4706
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124296 - Use After Free
CVE-2026-4691
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124292 - Out-of-bounds read
CVE-2026-4686
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124290 - Use After Free
CVE-2026-4684
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124291 - Out-of-bounds read
CVE-2026-4685
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
140.9.0, 149.0 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 109 more


Showing elements 121 - 140 out of 363