TH
Product
Thunderbird
On CISA KEVExploited in the wildRansomware-linked
2,073
CVEs
14
On KEV
10.0
Max CVSS
77
New 30D
Severity mix
Critical 379High 120Medium 1Low 0
Watch
Add Thunderbird to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: before 115.3.1 |
| CVE-2023-4863 In wildKEV | 8.8 | Sep 12 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Affected: before 102.15.1; 115.0 before 115.2.2 |
| CVE-2022-26485 In wildKEV | 8.8 | Dec 22 | Mozilla Firefox Use-After-Free Vulnerability Affected: before 91.6.2 |
| CVE-2019-17026 In wildKEV | 8.8 | Mar 2 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability Affected: before 68.4.1 |
| CVE-2019-11707 In wildKEV | 8.8 | Jul 23 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability Affected: before 60.7.2 |
| CVE-2013-1690 In wildKEV | 8.8 | Jun 26 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Affected: before 17.0.7 |
| CVE-2020-6819 In wildKEV | 8.1 | Apr 24 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Affected: before 68.7.0 |
| CVE-2020-6820 In wildKEV | 8.1 | Apr 24 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Affected: before 68.7.0 |
| CVE-2016-9079 In wildKEV | 7.5 | Jun 11 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Affected: before 45.5.1 |
| CVE-2026-100832 | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component Affected: before 140.17.0; 141.0 before 153.4.0 |
| CVE-2026-100831 | 8.8 | Sep 29 | Use-after-free in the DOM: UI Events & Focus Handling component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100825 | 8.8 | Sep 29 | Use-after-free in the JavaScript Engine: JIT component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100824 | 8.8 | Sep 29 | Privilege escalation in the Places component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100820 | 8.8 | Sep 29 | Privilege escalation in the Address Bar component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100815 | 8.8 | Sep 29 | Use-after-free in the CSS Parsing and Computation component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100814 | 8.8 | Sep 29 | Incorrect boundary conditions in the JavaScript Engine: JIT component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100813 | 8.8 | Sep 29 | Invalid pointer in the JavaScript Engine: JIT component Affected: before 157.0 |
| CVE-2026-100808 | 8.8 | Sep 29 | Mitigation bypass in the DOM: Service Workers component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100807 | 8.8 | Sep 29 | Privilege escalation in the DOM: Service Workers component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100801 | 8.8 | Sep 29 | Privilege escalation in the DLL Services component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100797 | 8.8 | Sep 29 | Privilege escalation due to use-after-free in the Graphics: WebRender component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100796 | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component Affected: before 157.0 |
| CVE-2026-100791 | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100790 | 8.8 | Sep 29 | Use-after-free in the XSLT component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100789 | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100785 | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100784 | 8.8 | Sep 29 | Use-after-free in the Layout: Text and Fonts component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100782 | 8.8 | Sep 29 | Privilege escalation due to incorrect boundary conditions in the Graphics component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100780 | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component Affected: before 157.0; 140.0 before 140.17.0; 153.0 before 153.4.0 |
| CVE-2026-100779 | 8.8 | Sep 29 | Use-after-free in the XSLT component Affected: before 157.0; 140.0 before 140.17.0; 153.0 before 153.4.0 |
| CVE-2026-100777 | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100776 | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100774 | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100773 | 8.8 | Sep 29 | Use-after-free in the Storage: IndexedDB component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100772 | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100769 | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100768 | 8.8 | Sep 29 | Use-after-free in the Graphics: WebGPU component Affected: before 157.0 |
| CVE-2026-100767 | 8.8 | Sep 29 | Use-after-free in the Networking: Cache component Affected: 140.0 before 140.17.0; 153.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100765 | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component Affected: before 153.4.0; 154.0 before 157.0 |
| CVE-2026-100764 | 8.8 | Sep 29 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component Affected: before 157.0 |
| CVE-2026-100761 | 8.8 | Sep 29 | Privilege escalation due to use-after-free in the Graphics: WebGPU component Affected: before 157.0 |
| CVE-2026-100757 | 8.8 | Sep 29 | Use-after-free in the Widget component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0 before 157.0 |
| CVE-2026-92076 | 8.8 | Sep 15 | Incorrect boundary conditions in the Networking component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92074 | 8.8 | Sep 15 | Mitigation bypass in the Popup Blocker component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92073 | 8.8 | Sep 15 | Privilege escalation in the Enterprise Policies component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92067 | 8.8 | Sep 15 | Use-after-free in the Widget: Gtk component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92065 | 8.8 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92064 | 8.8 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92062 | 8.8 | Sep 15 | Privilege escalation in the Session Restore component Affected: before 153.3.0; 154.0 before 156.0 |
| CVE-2026-92060 | 8.8 | Sep 15 | Use-after-free in the Internationalization component Affected: before 153.3.0; 154.0 before 156.0 |
The 500 most important CVEs for this product (exploited first, then by severity)