Vulnerabilidades do Mozilla Thunderbird
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mozilla Thunderbird: 523 registro(s), com versões afetadas e correções.cpe:2.3:a:mozilla:thunderbird
CVE-2026-16402
Crítica · 9.8
CWE-190 21/07/2026
Integer overflow in the Graphics: ImageLib component
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401
Alta · 8.8
CWE-269 21/07/2026
Privilege escalation in the Data Loss Prevention component
Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400
Alta · 7.5
CWE-200 21/07/2026
Information disclosure in the DOM: Security component
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399
Alta · 7.5
CWE-346 21/07/2026
Site isolation issue in the DOM: Navigation component
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398
Alta · 7.5
CWE-200 21/07/2026
Site isolation issue in the Graphics component
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16396
Alta · 8.8
CWE-269 21/07/2026
Privilege escalation in WebExtensions
Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16393
Crítica · 9.1
CWE-119 21/07/2026
Incorrect boundary conditions in the Graphics: WebGPU component
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392
Crítica · 9.1
CWE-670 21/07/2026
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391
Alta · 7.5
CWE-200 21/07/2026
Information disclosure in the Storage: IndexedDB component
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16390
Crítica · 9.1
CWE-693 21/07/2026
Mitigation bypass in the Enterprise Policies component
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16389
Crítica · 9.8
CWE-190 21/07/2026
Incorrect boundary conditions, integer overflow in the Libraries component in NSS
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388
Crítica · 9.8
CWE-693 21/07/2026
Sandbox escape in the DOM: Networking component
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387
Crítica · 9.8
CWE-200 21/07/2026
Site isolation issue in the Networking component
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16386
Alta · 7.5
CWE-908 21/07/2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385
Alta · 7.5
CWE-908 21/07/2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384
Alta · 7.5
CWE-908 21/07/2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16383
Crítica · 9.8
CWE-693 21/07/2026
Mitigation bypass in the DOM: Networking component
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16382
Crítica · 9.8
CWE-693 21/07/2026
Mitigation bypass in the DOM: Service Workers component
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16381
Crítica · 9.1
CWE-346 21/07/2026
Same-origin policy bypass in the Networking: DNS component
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16380
Crítica · 9.1
CWE-693 21/07/2026
Mitigation bypass in the Networking component
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16379
Alta · 8.8
CWE-269 21/07/2026
Privilege escalation in the DOM: Content Processes component
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16378
Alta · 7.5
CWE-20 21/07/2026
Other issue in the DOM: Copy & Paste and Drag & Drop component
Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16377
Crítica · 9.8
CWE-693 21/07/2026
Mitigation bypass in the PDF Viewer component
Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16376
Alta · 7.5
CWE-400 21/07/2026
Denial-of-service in the Graphics: WebGPU component
Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16375
Crítica · 9.8
CWE-346 21/07/2026
Site isolation issue in the Networking: HTTP component
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.