Known vulnerabilities in Mozilla Thunderbird - page 13

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1221
Public exploits: 32
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1221 known vulnerabilities: 10 critical, 549 high, 341 medium, 321 low Critical High Medium Low

Vulnerabilities (1221)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124311 - Use After Free
CVE-2026-4701
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU123244 - Memory corruption
CVE-2026-2807
CWE-119 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123243 - Out-of-bounds read
CVE-2026-2806
CWE-125 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123242 - NULL Pointer Dereference
CVE-2026-2805
CWE-476 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123241 - Use After Free
CVE-2026-2804
CWE-416 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123240 - Protection Mechanism Failure
CVE-2026-2803
CWE-693 Medium
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123239 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-2802
CWE-367 Medium
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123238 - Memory corruption
CVE-2026-2801
CWE-119 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123237 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-2800
CWE-451 Medium
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123236 - Use After Free
CVE-2026-2799
CWE-416 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123235 - Use After Free
CVE-2026-2798
CWE-416 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123234 - Use After Free
CVE-2026-2797
CWE-416 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123233 - Memory corruption
CVE-2026-2796
CWE-119 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123232 - Use After Free
CVE-2026-2795
CWE-416 High
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123210 - Protection Mechanism Failure
CVE-2026-2784
CWE-693 Medium
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123209 - Exposure of sensitive information to an unauthorized actor
CVE-2026-2783
CWE-200 Medium
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 35 more
#VU123208 - Permissions, Privileges, and Access Controls
CVE-2026-2782
CWE-264 Medium
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 35 more
#VU123207 - Integer overflow
CVE-2026-2781
CWE-190 Low
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 43 more
#VU123206 - Permissions, Privileges, and Access Controls
CVE-2026-2780
CWE-264 Medium
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 33 more
#VU123192 - Use After Free
CVE-2026-2787
CWE-416 Low
No
No
140.8.0, 148.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more


Showing elements 241 - 260 out of 1221