Mozilla
Security Vulnerabilities fixed in Thunderbird 153.2
MFSA2026-88 Sep 1, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-88. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
38 lines
Showing 1–38 of 38
CVE-2026-84639
BR2026-0000-042785
unclaimed
High: Uninitialized memory in MIME parsing
Credited as Ramesh Adhikari
CVE-2026-84639
BR2026-0000-042786
unclaimed
High: Uninitialized memory in MIME parsing
Credited as Dr. Faruk Kazi (CoE-CNDS Lab, VJTI, Mumbai, India)
CVE-2026-84640
BR2026-0000-042787
unclaimed
Medium: One byte overflow read in mail parser
Credited as Ramesh Adhikari
CVE-2026-84640
BR2026-0000-042788
unclaimed
Medium: One byte overflow read in mail parser
Credited as Dr. Faruk Kazi (CoE-CNDS Lab, VJTI, Mumbai, India)
CVE-2026-84641
BR2026-0000-042789
unclaimed
Low: Information disclosure due to malicious IMAP server response
Credited as ABDULAZIZ ALASAIQAH
CVE-2026-84637
BR2026-0000-042790
unclaimed
Low: Calendar invitation attachments could launch local executables
Credited as Trung Nguyen
CVE-2026-84642
BR2026-0000-042791
unclaimed
Low: Allowed UNC hostnames for attachments interpreted as a regular expression
Credited as ChinhNguyen
CVE-2026-84642
BR2026-0000-042792
unclaimed
Low: Allowed UNC hostnames for attachments interpreted as a regular expression
Credited as Lowk3yz
CVE-2026-75874
BR2026-0000-042793
unclaimed
High: Sandbox escape in the Remote Settings Client component
Credited as crixer
CVE-2026-84118
BR2026-0000-042794
unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as x0e
CVE-2026-84119
BR2026-0000-042795
unclaimed
High: Sandbox escape due to use-after-free in the DOM: Navigation component
Credited as Yaqoub Aldurayhim
CVE-2026-84120
BR2026-0000-042796
unclaimed
High: Use-after-free in the Audio/Video component
Credited as Ukyo Akai
CVE-2026-84121
BR2026-0000-042797
unclaimed
High: Sandbox escape due to use-after-free in the DOM: Security component
Credited as Yaqoub Aldurayhim
CVE-2026-84122
BR2026-0000-042798
unclaimed
High: Use-after-free in the Audio/Video component
Credited as Hyeonjun Ahn
CVE-2026-84123
BR2026-0000-042799
unclaimed
High: Privilege escalation due to use-after-free in the Graphics: WebGPU component
Credited as Yaqoub Aldurayhim
CVE-2026-84124
BR2026-0000-042800
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Hyeonjun Ahn
CVE-2026-84125
BR2026-0000-042801
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Yaqoub Aldurayhim
CVE-2026-74952
BR2026-0000-042802
unclaimed
Moderate: Privilege escalation in the Application Update component
Credited as Tomoya Nakanishi
CVE-2026-84129
BR2026-0000-042803
unclaimed
Moderate: Site isolation issue in the DOM: Navigation component
Credited as Yaqoub Aldurayhim
CVE-2026-84130
BR2026-0000-042804
unclaimed
Moderate: Information disclosure in the Graphics: WebGPU component
Credited as 5up3rh3i
CVE-2026-84131
BR2026-0000-042805
unclaimed
Moderate: Privilege escalation due to invalid pointer in the Graphics component
Credited as navapon
CVE-2026-84132
BR2026-0000-042806
unclaimed
Moderate: Information disclosure in the Networking: HTTP component
Credited as Shu Takahashi
CVE-2026-84133
BR2026-0000-042807
unclaimed
Low: Site isolation issue in the DOM: Push Subscriptions component
Credited as pakhunov.anton.n
CVE-2026-84134
BR2026-0000-042808
unclaimed
Low: Other issue in the Profile Backup component
Credited as 5up3rh3i
CVE-2026-84136
BR2026-0000-042809
unclaimed
Low: Other issue in the DOM: Navigation component
Credited as Apentota
CVE-2026-84137
BR2026-0000-042810
unclaimed
Low: Spoofing issue in the DOM: Core & HTML component
Credited as Riski Muhammad Ivan
CVE-2026-84139
BR2026-0000-042811
unclaimed
Low: Clickjacking issue in the DOM: Events component
Credited as Long Nguyen
CVE-2026-84140
BR2026-0000-042812
unclaimed
Low: Site isolation issue in the DOM: Navigation component
Credited as Mohamed Mbarek
CVE-2026-84141
BR2026-0000-042813
unclaimed
Low: Integer overflow in the Graphics: ImageLib component
Credited as nguyentuanhung1149
CVE-2026-84143
BR2026-0000-042814
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as Jan de Mooij
CVE-2026-84143
BR2026-0000-042815
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as Tom Ritter
CVE-2026-84143
BR2026-0000-042816
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as the Mozilla Fuzzing Team
CVE-2026-84144
BR2026-0000-042817
unclaimed
High: Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2
Credited as Leo Tenenbaum
CVE-2026-84144
BR2026-0000-042818
unclaimed
High: Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2
Credited as Tom Ritter
CVE-2026-84144
BR2026-0000-042819
unclaimed
High: Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2
Credited as the Mozilla Fuzzing Team
CVE-2026-84145
BR2026-0000-042820
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as Leo Tenenbaum
CVE-2026-84145
BR2026-0000-042821
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as Tom Ritter
CVE-2026-84145
BR2026-0000-042822
unclaimed
High: Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Credited as the Mozilla Fuzzing Team