BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Mozilla

Security Vulnerabilities fixed in Thunderbird 153.6

MFSA2026-122 Oct 27, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-122. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

154 lines
All 154 CVEs 154 Additional recognition 0 Unclaimed only
Showing 101–150 of 154 matching , page 3 of 4 , clear filters
CVE-2026-117951 BR2026-0000-036601 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117952 BR2026-0000-036602 unclaimed
High: Uninitialized memory in the Networking component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117953 BR2026-0000-036603 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117954 BR2026-0000-036604 unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117955 BR2026-0000-036605 unclaimed
Moderate: JIT miscompilation in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-100801 BR2026-0000-036606 unclaimed
Moderate: Privilege escalation in the DLL Services component
Credited as Mozilla
CVE-2026-117956 BR2026-0000-036607 unclaimed
Moderate: Invalid pointer in the Nimbus Desktop Client component
Credited as Mozilla
CVE-2026-117957 BR2026-0000-036608 unclaimed
Moderate: Cryptographic issue in the WebRTC: Networking component
Credited as Mozilla
CVE-2026-117958 BR2026-0000-036609 unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117959 BR2026-0000-036610 unclaimed
Moderate: Site isolation issue in the DOM: Service Workers component
Credited as Muhammad Ali
CVE-2026-117960 BR2026-0000-036611 unclaimed
Moderate: Spoofing issue in the DOM: Core & HTML component
Credited as Mohamed Mbarek
CVE-2026-117961 BR2026-0000-036612 unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117962 BR2026-0000-036613 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
Credited as Mozilla
CVE-2026-117963 BR2026-0000-036614 unclaimed
Moderate: Incorrect boundary conditions in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-117964 BR2026-0000-036615 unclaimed
Moderate: Use-after-free in the Panning and Zooming component
Credited as Mozilla
CVE-2026-117965 BR2026-0000-036616 unclaimed
Moderate: Same-origin policy bypass in the Address Bar component
Credited as Takashi Suzuki
CVE-2026-117966 BR2026-0000-036617 unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117967 BR2026-0000-036618 unclaimed
Moderate: Mitigation bypass in the DOM: Security component
Credited as Nguyen Tuan Hung
CVE-2026-117968 BR2026-0000-036619 unclaimed
Moderate: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117969 BR2026-0000-036620 unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117970 BR2026-0000-036621 unclaimed
Moderate: Race condition in the Disability Access APIs component
Credited as Nguyen Thanh Nguyen
CVE-2026-117971 BR2026-0000-036622 unclaimed
Moderate: Sandbox escape due to use-after-free in the Print Preview component
Credited as Mozilla
CVE-2026-117972 BR2026-0000-036623 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117973 BR2026-0000-036624 unclaimed
Moderate: Use-after-free in the Networking: DNS component
Credited as Mozilla
CVE-2026-117974 BR2026-0000-036625 unclaimed
Moderate: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-117975 BR2026-0000-036626 unclaimed
Moderate: Sandbox escape due to invalid pointer in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117976 BR2026-0000-036627 unclaimed
Moderate: Site isolation issue in the DOM: Navigation component
Credited as Shu Takahashi of Velcore Consulting Inc.
CVE-2026-117977 BR2026-0000-036628 unclaimed
Moderate: Other issue in the Console component
Credited as quanhx
CVE-2026-117978 BR2026-0000-036629 unclaimed
Moderate: Incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-117979 BR2026-0000-036630 unclaimed
Moderate: Incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117980 BR2026-0000-036631 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Massimo Palozzi
CVE-2026-117981 BR2026-0000-036632 unclaimed
Moderate: Privilege escalation in the Toolkit component
Credited as Mozilla
CVE-2026-117982 BR2026-0000-036633 unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117983 BR2026-0000-036634 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117984 BR2026-0000-036635 unclaimed
Moderate: Incorrect boundary conditions in the Layout: Scrolling and Overflow component
Credited as Mozilla
CVE-2026-117985 BR2026-0000-036636 unclaimed
Moderate: Sandbox escape due to use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117986 BR2026-0000-036637 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117987 BR2026-0000-036638 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117988 BR2026-0000-036639 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-117989 BR2026-0000-036640 unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Nguyen Tuan Hung
CVE-2026-117990 BR2026-0000-036641 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117991 BR2026-0000-036642 unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117992 BR2026-0000-036643 unclaimed
Moderate: Information disclosure in the CSS Parsing and Computation component
Credited as Takashi Suzuki
CVE-2026-117993 BR2026-0000-036644 unclaimed
Moderate: Integer overflow in the Graphics: Text component
Credited as 5up3rh3i
CVE-2026-117994 BR2026-0000-036645 unclaimed
Moderate: Use-after-free in the JavaScript: GC component
Credited as Mozilla
CVE-2026-117995 BR2026-0000-036646 unclaimed
Moderate: Privilege escalation in the DOM: UI Events & Focus Handling component
Credited as haruka yamazaki
CVE-2026-117996 BR2026-0000-036647 unclaimed
Moderate: Incorrect boundary conditions in the WebRTC component
Credited as Mozilla
CVE-2026-117997 BR2026-0000-036648 unclaimed
Moderate: Sandbox escape due to use-after-free in the Widget component
Credited as Mozilla
CVE-2026-117998 BR2026-0000-036649 unclaimed
Low: Mitigation bypass in the DOM: Push Subscriptions component
Credited as Ibuki Sato
CVE-2026-117999 BR2026-0000-036650 unclaimed
Low: Race condition in the IPC component
Credited as Mozilla