p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости thunderbird · Страница 11

За последние 30 дней в thunderbird опубликовано уязвимостей: 258; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1303

  1. CVE-2026-109730

    Высокий · CVSS 8.8EPSS 0,36%Есть исправление

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  2. CVE-2026-109729

    Средний · CVSS 5.4EPSS 0,24%Есть исправление

    Use-after-free in the JavaScript Engine: JIT component

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  3. CVE-2026-109728

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the DOM: Animation component

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  4. CVE-2026-109727

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  5. CVE-2026-109726

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  6. CVE-2026-109725

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  7. CVE-2026-109722

    Высокий · CVSS 8.1EPSS 0,31%Есть исправление

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  8. CVE-2026-109719

    Средний · CVSS 4.2EPSS 0,17%Есть исправление

    Race condition, use-after-free in the Graphics: CanvasWebGL component

    Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  9. CVE-2026-109718

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the XML component

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  10. CVE-2026-109716

    Высокий · CVSS 8.1EPSS 0,31%Есть исправление

    Incorrect boundary conditions in the JavaScript Engine component

    Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  11. CVE-2026-109715

    Высокий · CVSS 8.1EPSS 0,31%Есть исправление

    Incorrect boundary conditions in the JavaScript Engine component

    Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  12. CVE-2026-109712

    Высокий · CVSS 7.1EPSS 0,22%Есть исправление

    Sandbox escape due to uninitialized memory in the Graphics component

    Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  13. CVE-2026-109710

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the Graphics: Text component

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  14. CVE-2026-109706

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the Storage: IndexedDB component

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 1:153.5.1esr-1~deb13u1
    Опубликовано Обновлено
  15. CVE-2026-106016

    Критический · CVSS 9.8EPSS 0,32%Нет опубликованного исправления

    Mitigation bypass in the File Handling component

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.

    Опубликовано Обновлено
  16. CVE-2026-103500

    Средний · CVSS 6.3EPSS 0,28%Есть исправление

    Heap buffer overflow opening large email

    An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.

    • Обновитесь до 1:140.17.0esr-1~deb13u1
    Опубликовано Обновлено
  17. CVE-2026-100832

    Высокий · CVSS 8.8EPSS 0,24%Есть исправление

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 1:140.17.0esr-1~deb13u1
    Опубликовано Обновлено
  18. CVE-2026-100821

    Средний · CVSS 4.7EPSS 0,14%Есть исправление

    Site isolation issue in the Panning and Zooming component

    Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 1:140.17.0esr-1~deb13u1
    Опубликовано Обновлено
  19. CVE-2026-100820

    Высокий · CVSS 8.8EPSS 0,24%Есть исправление

    Privilege escalation in the Address Bar component

    Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    • Обновитесь до 1:140.17.0esr-1~deb13u1
    Опубликовано Обновлено
  20. CVE-2026-100819

    Критический · CVSS 9.6EPSS 0,26%Есть исправление

    Sandbox escape due to incorrect boundary conditions in the XPCOM component

    Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 1:140.17.0esr-1~deb13u1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →