CVE-2026-100799: Use of Uninitialized Variable

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100796: Use After Free

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100795: Allocation of Resources Without Limits or Throttling

Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100810: Exposure of Sensitive Information to an Unauthorized Actor

Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100761: Use After Free

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100763: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100764: Improper Restriction of Operations within the Bounds of a Memory Buffer

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

PT-2026-102576

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description The Graphics: WebGPU component contains uninitialized memory, which can lead to unexpected behavior or information disclosure. Recommendations Update Firefox to versio...

PT-2026-102570

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the JavaScript: WebAssembly component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a...

PT-2026-102573

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description The Graphics: WebGPU component contains uninitialized memory, which can lead to unexpected behavior or security risks. Recommendations Update Thunderbird to version 15...

PT-2026-102587

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description An invalid pointer issue exists within the Just-In-Time JIT component of the JavaScript Engine. JIT is a method of improving program performance by compiling code duri...

PT-2026-102578

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Preferences: Backend component, which can lead to a sandbox escape. A use-after-free occurs when a program continues to use a...

PT-2026-102538

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description Incorrect boundary conditions in the Graphics: WebGPU component allow for privilege escalation. Recommendations Update Thunderbird to version 157. Update Firefox to...

PT-2026-102537

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and compute capabilities to w...

PT-2026-102567

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description An issue exists in the JavaScript Engine component involving JIT Just-In-Time miscompilation. JIT is a method of improving program performance by compiling code during...

PT-2026-102579

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description A race condition leads to a use-after-free issue within the Audio/Video component. A race condition occurs when the timing or order of events affects the correctness o...

PT-2026-102589

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the CSS Parsing and Computation component. Use-after-free is a memory corruption flaw that occurs...

CVE-2026-100770: Use After Free

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

thunderbird security update

140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

CVE-2026-100831: Use After Free

Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...