Multiple vulnerabilities in Mozilla Thunderbird ESR

Descrição

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in GC can be exploited to cause denial of service or execute arbitrary code.
2. Security vulnerability in DOM can be exploited to bypass security restrictions.
3. Use after free vulnerability in IPC can be exploited to cause denial of service or execute arbitrary code.
4. Security UI vulnerability in Copy & Paste and Drag & Drop can be exploited to spoof user interface.
5. Memory safety vulnerability can be exploited to execute arbitrary code.
6. Information disclosure vulnerability in Networking for Windows can be exploited to obtain sensitive information.
7. Use after free vulnerability in JavaScript Engine can be exploited to cause denial of service or execute arbitrary code.
8. Integer overflow vulnerability in Graphics can be exploited to cause denial of service.

Comunicados originais

• MFSA2026-05

Produtos relacionados

• Mozilla-Thunderbird-ESR

Lista de CVE

• CVE-2026-0877
  critical
• CVE-2026-0878
  critical
• CVE-2026-0879
  critical
• CVE-2026-0880
  critical
• CVE-2026-0882
  critical
• CVE-2026-0883
  high
• CVE-2026-0884
  critical
• CVE-2026-0885
  high
• CVE-2026-0886
  high
• CVE-2026-0887
  warning
• CVE-2026-0890
  high
• CVE-2026-0891
  critical

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com