Known vulnerabilities in Mozilla Thunderbird - page 6

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1221
Public exploits: 32
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1221 known vulnerabilities: 10 critical, 549 high, 341 medium, 321 low Critical High Medium Low

Vulnerabilities (1221)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134616 - Out-of-bounds write
CVE-2026-12292
CWE-787 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134617 - Memory corruption
CVE-2026-12298
CWE-119 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134618 - Improper Access Control
CVE-2026-12296
CWE-284 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134605 - Memory corruption
CVE-2026-12290
CWE-119 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134606 - Use After Free
CVE-2026-12291
CWE-416 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134607 - Improper Access Control
CVE-2026-12294
CWE-284 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134608 - Improper Access Control
CVE-2026-12295
CWE-284 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134614 - Memory corruption
CVE-2026-12328
CWE-119 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU131851 - Improper Access Control
CVE-2026-8948
CWE-284 Medium
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131853 - Improper Privilege Management
CVE-2026-8952
CWE-269 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131854 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-8960
CWE-451 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131855 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-8963
CWE-451 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131856 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-8964
CWE-451 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131857 - Exposure of sensitive information to an unauthorized actor
CVE-2026-8965
CWE-200 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131858 - Exposure of sensitive information to an unauthorized actor
CVE-2026-8966
CWE-200 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131859 - Exposure of sensitive information to an unauthorized actor
CVE-2026-8967
CWE-200 Low
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131860 - Protection Mechanism Failure
CVE-2026-8969
CWE-693 Medium
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131861 - Improper Access Control
CVE-2026-8971
CWE-284 Medium
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131862 - Improper Privilege Management
CVE-2026-8972
CWE-269 High
No
No
151.0 19.05.2026 SB2026051935
SB2026052257
#VU131863 - Memory corruption
CVE-2026-8973
CWE-119 Medium
No
No
151.0 19.05.2026 SB2026051935
SB2026052257


Showing elements 101 - 120 out of 1221