Mozilla
Security Vulnerabilities fixed in Thunderbird 159
MFSA2026-121 Oct 27, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-121. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-121/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
173 lines
Showing 101–150 of 173 , page 3 of 4
CVE-2026-117943
BR2026-0000-036755
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117944
BR2026-0000-036756
unclaimed
High: Use-after-free in the Layout component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118015
BR2026-0000-036757
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117945
BR2026-0000-036758
unclaimed
High: Incorrect boundary conditions in the XML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118016
BR2026-0000-036759
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117946
BR2026-0000-036760
unclaimed
High: Incorrect boundary conditions in the JavaScript Engine component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117947
BR2026-0000-036761
unclaimed
High: Use-after-free in the XML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117948
BR2026-0000-036762
unclaimed
High: Use-after-free in the SVG component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117949
BR2026-0000-036763
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117950
BR2026-0000-036764
unclaimed
High: Incorrect boundary conditions in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117951
BR2026-0000-036765
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117952
BR2026-0000-036766
unclaimed
High: Uninitialized memory in the Networking component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117953
BR2026-0000-036767
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118017
BR2026-0000-036768
unclaimed
High: Use-after-free in the SVG component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117954
BR2026-0000-036769
unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118019
BR2026-0000-036770
unclaimed
Moderate: Race condition, use-after-free in the DOM: File component
Credited as Mozilla
CVE-2026-117955
BR2026-0000-036771
unclaimed
Moderate: JIT miscompilation in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-100801
BR2026-0000-036772
unclaimed
Moderate: Privilege escalation in the DLL Services component
Credited as Mozilla
CVE-2026-117956
BR2026-0000-036773
unclaimed
Moderate: Invalid pointer in the Nimbus Desktop Client component
Credited as Mozilla
CVE-2026-117957
BR2026-0000-036774
unclaimed
Moderate: Cryptographic issue in the WebRTC: Networking component
Credited as Mozilla
CVE-2026-117958
BR2026-0000-036775
unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117959
BR2026-0000-036776
unclaimed
Moderate: Site isolation issue in the DOM: Service Workers component
Credited as Muhammad Ali
CVE-2026-117960
BR2026-0000-036777
unclaimed
Moderate: Spoofing issue in the DOM: Core & HTML component
Credited as Mohamed Mbarek
CVE-2026-117961
BR2026-0000-036778
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117962
BR2026-0000-036779
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
Credited as Mozilla
CVE-2026-117963
BR2026-0000-036780
unclaimed
Moderate: Incorrect boundary conditions in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-117964
BR2026-0000-036781
unclaimed
Moderate: Use-after-free in the Panning and Zooming component
Credited as Mozilla
CVE-2026-117965
BR2026-0000-036782
unclaimed
Moderate: Same-origin policy bypass in the Address Bar component
Credited as Takashi Suzuki
CVE-2026-117966
BR2026-0000-036783
unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117967
BR2026-0000-036784
unclaimed
Moderate: Mitigation bypass in the DOM: Security component
Credited as Nguyen Tuan Hung
CVE-2026-118020
BR2026-0000-036785
unclaimed
Moderate: Use-after-free in the Layout component
Credited as Mozilla
CVE-2026-117968
BR2026-0000-036786
unclaimed
Moderate: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117969
BR2026-0000-036787
unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117970
BR2026-0000-036788
unclaimed
Moderate: Race condition in the Disability Access APIs component
Credited as Nguyen Thanh Nguyen
CVE-2026-117971
BR2026-0000-036789
unclaimed
Moderate: Sandbox escape due to use-after-free in the Print Preview component
Credited as Mozilla
CVE-2026-117972
BR2026-0000-036790
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-118021
BR2026-0000-036791
unclaimed
Moderate: Sandbox escape due to use-after-free in the XPCOM component
Credited as Mozilla
CVE-2026-117973
BR2026-0000-036792
unclaimed
Moderate: Use-after-free in the Networking: DNS component
Credited as Mozilla
CVE-2026-117974
BR2026-0000-036793
unclaimed
Moderate: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-117975
BR2026-0000-036794
unclaimed
Moderate: Sandbox escape due to invalid pointer in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117976
BR2026-0000-036795
unclaimed
Moderate: Site isolation issue in the DOM: Navigation component
Credited as Shu Takahashi of Velcore Consulting Inc.
CVE-2026-117977
BR2026-0000-036796
unclaimed
Moderate: Other issue in the Console component
Credited as quanhx
CVE-2026-117978
BR2026-0000-036797
unclaimed
Moderate: Incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-117979
BR2026-0000-036798
unclaimed
Moderate: Incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117980
BR2026-0000-036799
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Massimo Palozzi
CVE-2026-117981
BR2026-0000-036800
unclaimed
Moderate: Privilege escalation in the Toolkit component
Credited as Mozilla
CVE-2026-117982
BR2026-0000-036801
unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117983
BR2026-0000-036802
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-118022
BR2026-0000-036803
unclaimed
Moderate: Sandbox escape due to use-after-free in the Disability Access APIs component
Credited as Mozilla
CVE-2026-117984
BR2026-0000-036804
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Scrolling and Overflow component
Credited as Mozilla