TH
Product
Thunderbird
On CISA KEVExploited in the wildRansomware-linked
2,073
CVEs
14
On KEV
10.0
Max CVSS
77
New 30D
Severity mix
Critical 379High 120Medium 1Low 0
Watch
Add Thunderbird to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-1524 | 9.8 | Apr 30 | The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not… Affected: before 24.5 |
| CVE-2014-1514 | 9.8 | Mar 19 | vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the… Affected: before 24.4 |
| CVE-2014-1511 | 9.8 | Mar 19 | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified… Affected: before 24.4 |
| CVE-2014-1510 | 9.8 | Mar 19 | The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute… Affected: before 24.4 |
| CVE-2014-1493 | 9.8 | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow… Affected: before 24.4 |
| CVE-2014-1486 | 9.8 | Feb 6 | Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24… Affected: before 24.3 |
| CVE-2014-1477 | 9.8 | Feb 6 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow… Affected: before 24.3 |
| CVE-2013-6671 | 9.8 | Dec 11 | The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers… Affected: before 24.2 |
| CVE-2013-5618 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x… Affected: before 24.2 |
| CVE-2013-5616 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and… Affected: before 24.2 |
| CVE-2013-5615 | 9.8 | Dec 11 | The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain… Affected: before 24.2 |
| CVE-2013-5613 | 9.8 | Dec 11 | Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey… Affected: before 24.2 |
| CVE-2013-5609 | 9.8 | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow… Affected: before 24.2 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: before 3.0.6; 3.0.7 before 3.1.1 |
| CVE-2026-100829 | 9.6 | Sep 29 | Mitigation bypass in the DOM: Security component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100828 | 9.6 | Sep 29 | Mitigation bypass in the Bookmarks & History component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100819 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the XPCOM component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100818 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Widget: Gtk component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100811 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100804 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Preferences: Backend component Affected: before 157.0 |
| CVE-2026-100800 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Disability Access APIs component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100794 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Internationalization component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100787 | 9.6 | Sep 29 | Sandbox escape in the XUL component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100786 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Graphics component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100781 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component Affected: before 157.0; 140.0 before 140.17.0; 153.0 before 153.4.0 |
| CVE-2026-100778 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100775 | 9.6 | Sep 29 | Sandbox escape in the Graphics component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100770 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Content Processes component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100762 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Content Processes component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100760 | 9.6 | Sep 29 | Sandbox escape in the Security: Process Sandboxing component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100758 | 9.6 | Sep 29 | Sandbox escape in the DOM: Navigation component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-92071 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92045 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the WebRTC component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92035 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Graphics component Affected: before 140.17.0; 141.0 before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92032 | 9.6 | Sep 15 | Sandbox escape due to invalid pointer in the Graphics component Affected: before 140.16.0; 141.0 before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92018 | 9.6 | Sep 15 | Sandbox escape in the DOM: Core & HTML component Affected: before 140.16.0; 141.0 before 153.3.0; 154.0 before 156.0 |
| CVE-2026-84121 | 9.6 | Sep 1 | Sandbox escape due to use-after-free in the DOM: Security component Affected: before 140.15.0; 141.0 before 153.2.0; 154.0 before 155.0 |
| CVE-2026-84119 | 9.6 | Sep 1 | Sandbox escape due to use-after-free in the DOM: Navigation component Affected: before 140.15.0; 141.0 before 153.2.0; 154.0 before 155.0 |
| CVE-2026-12297 | 9.6 | Jun 16 | Sandbox escape due to incorrect boundary conditions in the Networking component Affected: before 140.12.0; before 152.0.0 |
| CVE-2026-12296 | 9.6 | Jun 16 | Sandbox escape in the Security: Process Sandboxing component Affected: before 140.12.0; before 152.0.0 |
| CVE-2026-12295 | 9.6 | Jun 16 | Sandbox escape in the DOM: Navigation component Affected: before 140.12.0; before 152.0.0 |
| CVE-2026-12294 | 9.6 | Jun 16 | Sandbox escape in the DOM: Workers component Affected: before 140.12.0; before 152.0.0 |
| CVE-2026-8959 | 9.6 | May 19 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Affected: before 140.11; before 151.0.0 |
| CVE-2026-8953 | 9.6 | May 19 | Sandbox escape due to use-after-free in the Disability Access APIs component Affected: before 140.11 |
| CVE-2026-7321 | 9.6 | Apr 28 | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component Affected: before 140.10.1; before 150.0 |
| CVE-2024-7519 | 9.6 | Aug 6 | Insufficient checks when processing graphics shared memory could have led to memory corruption Affected: before 115.14.0; 128.0.1 |
| CVE-2022-26384 | 9.6 | Dec 22 | If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when… Affected: before 91.7 |
| CVE-2022-22759 | 9.6 | Dec 22 | If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g Affected: before 91.6 |
| CVE-2026-92059 | 9.3 | Sep 15 | Incorrect boundary conditions in the DOM: Editor component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-8950 | 9.3 | May 19 | Same-origin policy bypass in the Networking: HTTP component Affected: before 140.11; before 151.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)