TH
Product
Thunderbird
by Mozilla · last CVE Sep 30, 2026
On CISA KEVExploited in the wildRansomware-linked
2,073
CVEs
14
On KEV
10.0
Max CVSS
77
New 30D
Severity mix
Critical 379High 120Medium 1Low 0
Watch

Add Thunderbird to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5217
In wildKEV
8.8
49%
Sep 28
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Affected: before 115.3.1
CVE-2023-4863
In wildKEV
8.8
100%
Sep 12
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Affected: before 102.15.1; 115.0 before 115.2.2
CVE-2022-26485
In wildKEV
8.8
14%
Dec 22
Mozilla Firefox Use-After-Free Vulnerability
Affected: before 91.6.2
CVE-2019-17026
In wildKEV
8.8
46%
Mar 2
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
Affected: before 68.4.1
CVE-2019-11707
In wildKEV
8.8
38%
Jul 23
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Affected: before 60.7.2
CVE-2013-1690
In wildKEV
8.8
69%
Jun 26
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Affected: before 17.0.7
CVE-2020-6819
In wildKEV
8.1
3%
Apr 24
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Affected: before 68.7.0
CVE-2020-6820
In wildKEV
8.1
7%
Apr 24
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Affected: before 68.7.0
CVE-2016-9079
In wildKEV
7.5
87%
Jun 11
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Affected: before 45.5.1
Showing 9
The 500 most important CVEs for this product (exploited first, then by severity)