Known vulnerabilities in Mozilla Thunderbird - page 7

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1276
Public exploits: 34
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1276 known vulnerabilities: 10 critical, 565 high, 369 medium, 332 low Critical High Medium Low

Vulnerabilities (1276)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57963
CWE-79 Medium
No
No
140.12.1, 152.0.1 22.07.2026 SB2026072297
SB2026072303
SB2026072304
and 1 more
#VU134634 - Use After Free
CVE-2026-12293
CWE-416 High
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134635 - Memory corruption
CVE-2026-12300
CWE-119 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134636 - Memory corruption
CVE-2026-12301
CWE-119 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134637 - Out-of-bounds read
CVE-2026-12303
CWE-125 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134638 - Protection Mechanism Failure
CVE-2026-12316
CWE-693 Medium
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134639 - Memory corruption
CVE-2026-12317
CWE-119 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134640 - Memory corruption
CVE-2026-12318
CWE-119 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
SB2026070132
and 4 more
#VU134641 - Improper input validation
CVE-2026-12319
CWE-20 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134642 - Exposure of sensitive information to an unauthorized actor
CVE-2026-12320
CWE-200 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134643 - Incorrect Calculation
CVE-2026-12321
CWE-682 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134644 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-12322
CWE-1021 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134645 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-12323
CWE-451 Low
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134646 - Memory corruption
CVE-2026-12326
CWE-119 High
No
No
152.0 16.06.2026 SB2026061653
SB2026061757
#VU134623 - Memory corruption
CVE-2026-12307
CWE-119 Medium
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134624 - Memory corruption
CVE-2026-12308
CWE-119 Medium
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134632 - Out-of-bounds read
CVE-2026-12324
CWE-125 Low
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134633 - Memory corruption
CVE-2026-12327
CWE-119 High
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more
#VU134612 - Memory corruption
CVE-2026-12330
CWE-119 Medium
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061801
and 27 more
#VU134613 - Improper input validation
CVE-2026-12325
CWE-20 Medium
No
No
140.12.0, 152.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more


Showing elements 121 - 140 out of 1276