Mozilla
Security Vulnerabilities fixed in Thunderbird 159
MFSA2026-121 Oct 27, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-121. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-121/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
173 lines
Showing 151–173 of 173 matching , page 4 of 4 , clear filters
CVE-2026-117985
BR2026-0000-036805
unclaimed
Moderate: Sandbox escape due to use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117986
BR2026-0000-036806
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117987
BR2026-0000-036807
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117988
BR2026-0000-036808
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-117989
BR2026-0000-036809
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Nguyen Tuan Hung
CVE-2026-118023
BR2026-0000-036810
unclaimed
Moderate: Sandbox escape due to use-after-free in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117990
BR2026-0000-036811
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117991
BR2026-0000-036812
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117992
BR2026-0000-036813
unclaimed
Moderate: Information disclosure in the CSS Parsing and Computation component
Credited as Takashi Suzuki
CVE-2026-117993
BR2026-0000-036814
unclaimed
Moderate: Integer overflow in the Graphics: Text component
Credited as 5up3rh3i
CVE-2026-117994
BR2026-0000-036815
unclaimed
Moderate: Use-after-free in the JavaScript: GC component
Credited as Mozilla
CVE-2026-117995
BR2026-0000-036816
unclaimed
Moderate: Privilege escalation in the DOM: UI Events & Focus Handling component
Credited as haruka yamazaki
CVE-2026-117996
BR2026-0000-036817
unclaimed
Moderate: Incorrect boundary conditions in the WebRTC component
Credited as Mozilla
CVE-2026-117997
BR2026-0000-036818
unclaimed
Moderate: Sandbox escape due to use-after-free in the Widget component
Credited as Mozilla
CVE-2026-118024
BR2026-0000-036819
unclaimed
Moderate: Use-after-free in the Graphics: Text component
Credited as Mozilla
CVE-2026-118025
BR2026-0000-036820
unclaimed
Moderate: Other issue in the SVG component
Credited as Mozilla
CVE-2026-117998
BR2026-0000-036821
unclaimed
Low: Mitigation bypass in the DOM: Push Subscriptions component
Credited as Ibuki Sato
CVE-2026-117999
BR2026-0000-036822
unclaimed
Low: Race condition in the IPC component
Credited as Mozilla
CVE-2026-118000
BR2026-0000-036823
unclaimed
Low: Information disclosure in the Networking: HTTP component
Credited as Mozilla
CVE-2026-118002
BR2026-0000-036824
unclaimed
Low: Information disclosure due to race condition in the Networking component
Credited as Abdulrahman Alzahrani
CVE-2026-118003
BR2026-0000-036825
unclaimed
Low: Information disclosure in the Networking: DNS component
Credited as eldjiikgull
CVE-2026-118026
BR2026-0000-036826
unclaimed
Low: Invalid pointer in the JavaScript: GC component
Credited as Mozilla
CVE-2026-118004
BR2026-0000-036827
unclaimed
Low: Incorrect boundary conditions in the CSS Transitions and Animations component
Credited as Mozilla