PT-2026-111429

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A sandbox escape exists in the Networking component caused by incorrect boundary conditions. A...

PT-2026-111478

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A race condition in the Networking component allows for a sandbox escape. A race condition occu...

PT-2026-111489

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An information disclosure issue exists within the Networking: Cache component. Recommendations Update Firefox to version 158 or later. Update Thunderbird to version 15...

PT-2026-111491

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An information disclosure issue exists within the WebRTC: Networking component. Recommendations Update Firefox to version 158 or later. Update Thunderbird to version 1...

PT-2026-111499

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description A race condition exists in the Networking: DNS component. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timin...

CVE-2026-109705: Use After Free

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109707: Use After Free

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109751: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

KLA91333 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

PT-2026-111426

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A use-after-free issue exists in the Networking component caused by incorrect boundary...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote Windows host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. CVE-2026-10601...

PT-2026-111472

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An information disclosure issue exists within the Networking component. Recommendations Update...

PT-2026-111479

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A site isolation issue exists within the Networking component. Site isolation is a security...

PT-2026-111480

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A mitigation bypass exists within the Networking: HTTP component. Recommendations Update Firefo...

PT-2026-111487

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An information disclosure issue exists within the Networking component. Recommendations Update...

CVE-2026-109708: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109779: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109771: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109769: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109757: Concurrent Execution using Shared Resource with Improper Synchronization

Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...