Known vulnerabilities in Mozilla Thunderbird - page 15

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1276
Public exploits: 34
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1276 known vulnerabilities: 10 critical, 565 high, 369 medium, 332 low Critical High Medium Low

Vulnerabilities (1276)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124310 - Exposure of sensitive information to an unauthorized actor
CVE-2026-4700
CWE-200 Medium
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124311 - Use After Free
CVE-2026-4701
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124312 - Insufficient Control Flow Management
CVE-2026-4702
CWE-691 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124307 - Use After Free
CVE-2026-4688
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124308 - Out-of-bounds read
CVE-2026-4695
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124309 - Out-of-bounds read
CVE-2026-4697
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124301 - Heap-based Buffer Overflow
CVE-2026-4698
CWE-122 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124302 - Out-of-bounds read
CVE-2026-4699
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124297 - Improper Access Control
CVE-2026-4692
CWE-284 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124298 - Out-of-bounds read
CVE-2026-4693
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124299 - Integer overflow
CVE-2026-4694
CWE-190 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124300 - Use After Free
CVE-2026-4696
CWE-416 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124292 - Out-of-bounds read
CVE-2026-4686
CWE-125 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124293 - Out-of-bounds write
CVE-2026-4687
CWE-787 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124294 - Integer overflow
CVE-2026-4689
CWE-190 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124295 - Integer overflow
CVE-2026-4690
CWE-190 High
No
No
140.9.0, 149.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU123242 - NULL Pointer Dereference
CVE-2026-2805
CWE-476 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123240 - Protection Mechanism Failure
CVE-2026-2803
CWE-693 Medium
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
SB2026030548
#VU123239 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-2802
CWE-367 Medium
No
No
148.0 25.02.2026 SB2026022446
SB2026022527
#VU123238 - Memory corruption
CVE-2026-2801
CWE-119 Low
No
No
148.0 25.02.2026 SB2026022446
SB2026022527


Showing elements 281 - 300 out of 1276