Search Results (1837 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14899 1 Mozilla 1 Thunderbird 2026-08-12 7.5 High
The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.
CVE-2026-8091 1 Mozilla 2 Firefox, Thunderbird 2026-08-11 9.8 Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
CVE-2026-16392 1 Mozilla 2 Firefox, Thunderbird 2026-07-30 9.1 Critical
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16364 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.1 Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16365 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 8.8 High
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16367 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 10 Critical
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16376 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16380 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.1 Critical
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16382 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.8 Critical
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16403 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 6.5 Medium
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16410 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.8 Critical
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16372 1 Mozilla 2 Firefox, Thunderbird 2026-07-26 8.8 High
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401 1 Mozilla 2 Firefox, Thunderbird 2026-07-26 8.8 High
Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16366 1 Mozilla 2 Firefox, Thunderbird 2026-07-24 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16371 1 Mozilla 2 Firefox, Thunderbird 2026-07-24 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16379 1 Mozilla 2 Firefox, Thunderbird 2026-07-24 8.8 High
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.