# Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Incorrect boundary conditions in the Security: Process Sandboxing component](https://agentprime.io/advisories/CVE-2026-92061.md)
  `CVE-2026-92061` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the Internationalization component](https://agentprime.io/advisories/CVE-2026-92060.md)
  `CVE-2026-92060` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Incorrect boundary conditions in the DOM: Editor component](https://agentprime.io/advisories/CVE-2026-92059.md)
  `CVE-2026-92059` · CVE record: Mozilla Firefox and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the Graphics component](https://agentprime.io/advisories/CVE-2026-92058.md)
  `CVE-2026-92058` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Mitigation bypass in the Enterprise Policies component](https://agentprime.io/advisories/CVE-2026-92057.md)
  `CVE-2026-92057` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Use-after-free in the Graphics: Text component](https://agentprime.io/advisories/CVE-2026-92056.md)
  `CVE-2026-92056` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation in the DevTools component](https://agentprime.io/advisories/CVE-2026-92055.md)
  `CVE-2026-92055` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Privilege escalation in the Memory component](https://agentprime.io/advisories/CVE-2026-92054.md)
  `CVE-2026-92054` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92053.md)
  `CVE-2026-92053` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92052.md)
  `CVE-2026-92052` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Spoofing issue due to invalid pointer in the Graphics component](https://agentprime.io/advisories/CVE-2026-92051.md)
  `CVE-2026-92051` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Sandbox escape due to race condition in the XPConnect component](https://agentprime.io/advisories/CVE-2026-92050.md)
  `CVE-2026-92050` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Race condition
- [Use-after-free in the Widget: Win32 component](https://agentprime.io/advisories/CVE-2026-92049.md)
  `CVE-2026-92049` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component](https://agentprime.io/advisories/CVE-2026-92048.md)
  `CVE-2026-92048` · CVE record: Mozilla Firefox and 1 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation in the Crash Reporting component](https://agentprime.io/advisories/CVE-2026-92047.md)
  `CVE-2026-92047` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Use-after-free in the Graphics component](https://agentprime.io/advisories/CVE-2026-92046.md)
  `CVE-2026-92046` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the WebRTC component](https://agentprime.io/advisories/CVE-2026-92045.md)
  `CVE-2026-92045` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Information disclosure in the Networking: HTTP component](https://agentprime.io/advisories/CVE-2026-92044.md)
  `CVE-2026-92044` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Privilege escalation due to incorrect boundary conditions in the Audio/Video component](https://agentprime.io/advisories/CVE-2026-92043.md)
  `CVE-2026-92043` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Race condition in the DOM: Content Processes component](https://agentprime.io/advisories/CVE-2026-92042.md)
  `CVE-2026-92042` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Race condition
- [Mitigation bypass in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-92041.md)
  `CVE-2026-92041` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Use-after-free in the JavaScript: WebAssembly component](https://agentprime.io/advisories/CVE-2026-92040.md)
  `CVE-2026-92040` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Mitigation bypass in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2026-92039.md)
  `CVE-2026-92039` · CVE record: Mozilla Firefox and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Mitigation bypass in the Remote Settings Client component](https://agentprime.io/advisories/CVE-2026-92038.md)
  `CVE-2026-92038` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Incorrect boundary conditions in the DOM: Animation component](https://agentprime.io/advisories/CVE-2026-92037.md)
  `CVE-2026-92037` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Incorrect boundary conditions in the Networking: HTTP component](https://agentprime.io/advisories/CVE-2026-92036.md)
  `CVE-2026-92036` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Graphics component](https://agentprime.io/advisories/CVE-2026-92035.md)
  `CVE-2026-92035` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Site isolation issue in the Graphics component](https://agentprime.io/advisories/CVE-2026-92034.md)
  `CVE-2026-92034` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-346
- [Sandbox escape due to invalid pointer in the Graphics component](https://agentprime.io/advisories/CVE-2026-92032.md)
  `CVE-2026-92032` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Information disclosure in the Graphics: ImageLib component](https://agentprime.io/advisories/CVE-2026-92031.md)
  `CVE-2026-92031` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component](https://agentprime.io/advisories/CVE-2026-92030.md)
  `CVE-2026-92030` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Use-after-free in the SVG component](https://agentprime.io/advisories/CVE-2026-92029.md)
  `CVE-2026-92029` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the DOM: Core & HTML component](https://agentprime.io/advisories/CVE-2026-92028.md)
  `CVE-2026-92028` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the DOM: Streams component](https://agentprime.io/advisories/CVE-2026-92027.md)
  `CVE-2026-92027` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the Networking component](https://agentprime.io/advisories/CVE-2026-92026.md)
  `CVE-2026-92026` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-92025.md)
  `CVE-2026-92025` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the SVG component](https://agentprime.io/advisories/CVE-2026-92024.md)
  `CVE-2026-92024` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the XML component](https://agentprime.io/advisories/CVE-2026-92023.md)
  `CVE-2026-92023` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the DOM: HTML Parser component](https://agentprime.io/advisories/CVE-2026-92022.md)
  `CVE-2026-92022` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2026-92021.md)
  `CVE-2026-92021` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component](https://agentprime.io/advisories/CVE-2026-92020.md)
  `CVE-2026-92020` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Mitigation bypass in the Remote Settings Client component](https://agentprime.io/advisories/CVE-2026-92019.md)
  `CVE-2026-92019` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Sandbox escape in the DOM: Core & HTML component](https://agentprime.io/advisories/CVE-2026-92018.md)
  `CVE-2026-92018` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Privilege escalation in the DOM: Service Workers component](https://agentprime.io/advisories/CVE-2026-92017.md)
  `CVE-2026-92017` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Use-after-free in the Disability Access APIs component](https://agentprime.io/advisories/CVE-2026-92016.md)
  `CVE-2026-92016` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation in the WebExtensions component](https://agentprime.io/advisories/CVE-2026-92015.md)
  `CVE-2026-92015` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Privilege escalation due to incorrect boundary conditions in the Graphics component](https://agentprime.io/advisories/CVE-2026-92014.md)
  `CVE-2026-92014` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92013.md)
  `CVE-2026-92013` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92012.md)
  `CVE-2026-92012` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92011.md)
  `CVE-2026-92011` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92010.md)
  `CVE-2026-92010` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92009.md)
  `CVE-2026-92009` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92008.md)
  `CVE-2026-92008` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92007.md)
  `CVE-2026-92007` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-92006.md)
  `CVE-2026-92006` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Use-after-free in the Audio/Video: Web Codecs component](https://agentprime.io/advisories/CVE-2026-92005.md)
  `CVE-2026-92005` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Allowed UNC hostnames for attachments interpreted as a regular expression](https://agentprime.io/advisories/CVE-2026-84642.md)
  `CVE-2026-84642` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [Information disclosure due to malicious IMAP server response](https://agentprime.io/advisories/CVE-2026-84641.md)
  `CVE-2026-84641` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [One byte overflow read in mail parser](https://agentprime.io/advisories/CVE-2026-84640.md)
  `CVE-2026-84640` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-126
- [Uninitialized memory in MIME parsing](https://agentprime.io/advisories/CVE-2026-84639.md)
  `CVE-2026-84639` · CVE record: Mozilla Thunderbird · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/mozilla-thunderbird.md>
Older: <https://agentprime.io/advisories/technology/mozilla-thunderbird.md?cursor=WyIyMDI2LTA5LTAxVDIxOjMzOjA2LjI1MTAwMFoiLCJDVkUtMjAyNi04NDYzOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-thunderbird&cursor=WyIyMDI2LTA5LTE1VDEyOjM0OjIzLjg3NTAwMFoiLCJDVkUtMjAyNi05MjA2MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-thunderbird/?cursor=WyIyMDI2LTA5LTE1VDEyOjM0OjIzLjg3NTAwMFoiLCJDVkUtMjAyNi05MjA2MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.