p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости thunderbird · Страница 24

За последние 30 дней в thunderbird опубликовано уязвимостей: 263; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1304

  1. CVE-2026-74979

    Критический · CVSS 9.8EPSS 0,53%Нет опубликованного исправления

    Mitigation bypass in the Add-ons Manager component

    Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  2. CVE-2026-74978

    Высокий · CVSS 8.1EPSS 0,38%Нет опубликованного исправления

    Clickjacking issue in the Widget component

    Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  3. CVE-2026-74977

    Высокий · CVSS 7.5EPSS 0,6%Нет опубликованного исправления

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  4. CVE-2026-74975

    Средний · CVSS 5.4EPSS 0,25%Нет опубликованного исправления

    Spoofing issue in the Downloads component in Firefox for Android

    Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

    Опубликовано Обновлено
  5. CVE-2026-74970

    Средний · CVSS 5.4EPSS 0,16%Нет опубликованного исправления

    Site isolation issue in the Graphics component

    Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  6. CVE-2026-74968

    Средний · CVSS 5.4EPSS 0,16%Нет опубликованного исправления

    Site isolation issue in the Graphics: WebRender component

    Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  7. CVE-2026-74966

    Высокий · CVSS 7.5EPSS 0,44%Нет опубликованного исправления

    Information disclosure in the Form Autofill component

    Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  8. CVE-2026-74961

    Критический · CVSS 9.1EPSS 0,44%Нет опубликованного исправления

    Side-channel in the Web Audio component

    Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  9. CVE-2026-74958

    Высокий · CVSS 7.5EPSS 0,45%Нет опубликованного исправления

    Information disclosure in the WebRTC component

    Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  10. CVE-2026-74956

    Критический · CVSS 9.1EPSS 0,5%Нет опубликованного исправления

    Same-origin policy bypass in the DOM: Service Workers component

    Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  11. CVE-2026-74955

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Request Handling component

    Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  12. CVE-2026-74954

    Высокий · CVSS 7.5EPSS 0,44%Нет опубликованного исправления

    Information disclosure due to side-channel in the Storage: Cache API component

    Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  13. CVE-2026-74952

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Application Update component

    Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.

    Опубликовано Обновлено
  14. CVE-2026-74950

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Downloads API component

    Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  15. CVE-2026-74947

    Высокий · CVSS 8.8EPSS 0,45%Нет опубликованного исправления

    Privilege escalation due to invalid pointer in the Graphics component

    Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  16. CVE-2026-74938

    Критический · CVSS 9.1EPSS 0,44%Нет опубликованного исправления

    Mitigation bypass in the JavaScript: GC component

    Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  17. CVE-2026-74937

    Высокий · CVSS 8.8EPSS 0,44%Нет опубликованного исправления

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  18. CVE-2026-75874

    Критический · CVSS 10EPSS 0,46%Нет опубликованного исправления

    Sandbox escape in the Remote Settings Client component

    Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.

    Опубликовано Обновлено
  19. CVE-2026-74990

    Критический · CVSS 9.8EPSS 0,71%Нет опубликованного исправления

    Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →