Known vulnerabilities in Mozilla Thunderbird - page 4

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1221
Public exploits: 32
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1221 known vulnerabilities: 10 critical, 549 high, 341 medium, 321 low Critical High Medium Low

Vulnerabilities (1221)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139184 - Uncontrolled Memory Allocation
CVE-2026-57962
CWE-789 Medium
No
No
140.12.1, 152.0.1 22.07.2026 SB2026072297
SB2026072303
SB2026072304
and 1 more
#VU139185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57963
CWE-79 Medium
No
No
140.12.1, 152.0.1 22.07.2026 SB2026072297
SB2026072303
SB2026072304
and 1 more
#VU138992 - Exposure of sensitive information to an unauthorized actor
CVE-2026-16405
CWE-200 Low
No
No
140.13.0, 153.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 14 more
#VU138993 - Memory corruption
CVE-2026-16412
CWE-119 High
No
No
140.13.0, 153.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 14 more
#VU138975 - Memory corruption
CVE-2026-16360
CWE-119 High
No
No
140.13.0, 153.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 14 more
#VU138976 - Memory corruption
CVE-2026-16361
CWE-119 High
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072442
and 13 more
#VU134634 - Use After Free
CVE-2026-12293
CWE-416 High
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134635 - Memory corruption
CVE-2026-12300
CWE-119 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134636 - Memory corruption
CVE-2026-12301
CWE-119 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134637 - Out-of-bounds read
CVE-2026-12303
CWE-125 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134638 - Protection Mechanism Failure
CVE-2026-12316
CWE-693 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134639 - Memory corruption
CVE-2026-12317
CWE-119 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134640 - Memory corruption
CVE-2026-12318
CWE-119 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
SB2026070132
#VU134641 - Improper input validation
CVE-2026-12319
CWE-20 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134642 - Exposure of sensitive information to an unauthorized actor
CVE-2026-12320
CWE-200 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134643 - Incorrect Calculation
CVE-2026-12321
CWE-682 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134644 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-12322
CWE-1021 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134645 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-12323
CWE-451 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134646 - Memory corruption
CVE-2026-12326
CWE-119 High
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134624 - Memory corruption
CVE-2026-12308
CWE-119 Medium
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more


Showing elements 61 - 80 out of 1221