p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости thunderbird · Страница 15

За последние 30 дней в thunderbird опубликовано уязвимостей: 258; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1303

  1. CVE-2026-92014

    Высокий · CVSS 8.8EPSS 0,24%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics component

    Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  2. CVE-2026-92013

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  3. CVE-2026-92012

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  4. CVE-2026-92011

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  5. CVE-2026-92010

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  6. CVE-2026-92009

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  7. CVE-2026-92008

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  8. CVE-2026-92007

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  9. CVE-2026-92006

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  10. CVE-2026-92005

    Средний · CVSS 5.3EPSS 0,36%Есть исправление

    Use-after-free in the Audio/Video: Web Codecs component

    Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Обновитесь до 1:140.16.0esr-1~deb13u1
    Опубликовано Обновлено
  11. CVE-2026-84641

    Высокий · CVSS 7.5EPSS 0,27%Есть исправление

    Information disclosure due to malicious IMAP server response

    A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  12. CVE-2026-84640

    Высокий · CVSS 7.5EPSS 0,26%Есть исправление

    One byte overflow read in mail parser

    A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  13. CVE-2026-84639

    Критический · CVSS 9.1EPSS 0,32%Есть исправление

    Uninitialized memory in MIME parsing

    Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  14. CVE-2026-84143

    Критический · CVSS 9.8EPSS 0,38%Есть исправление

    Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  15. CVE-2026-84124

    Средний · CVSS 5.4EPSS 0,17%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  16. CVE-2026-84122

    Средний · CVSS 5.4EPSS 0,21%Есть исправление

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  17. CVE-2026-84145

    Высокий · CVSS 7.5EPSS 0,37%Есть исправление

    Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  18. CVE-2026-84131

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Privilege escalation due to invalid pointer in the Graphics component

    Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  19. CVE-2026-84121

    Критический · CVSS 9.6EPSS 0,32%Есть исправление

    Sandbox escape due to use-after-free in the DOM: Security component

    Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено
  20. CVE-2026-84120

    Средний · CVSS 5.4EPSS 0,22%Есть исправление

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Обновитесь до 1:140.15.0esr-1~deb13u1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →