Multiple vulnerabilities in Mozilla Thunderbird ESR

Beschreibung

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in GC can be exploited to cause denial of service or execute arbitrary code.
2. Security vulnerability in DOM can be exploited to bypass security restrictions.
3. Use after free vulnerability in IPC can be exploited to cause denial of service or execute arbitrary code.
4. Security UI vulnerability in Copy & Paste and Drag & Drop can be exploited to spoof user interface.
5. Memory safety vulnerability can be exploited to execute arbitrary code.
6. Information disclosure vulnerability in Networking for Windows can be exploited to obtain sensitive information.
7. Use after free vulnerability in JavaScript Engine can be exploited to cause denial of service or execute arbitrary code.
8. Integer overflow vulnerability in Graphics can be exploited to cause denial of service.

Ursprüngliche Informationshinweise

• MFSA2026-05

Betroffene Produkte

• Mozilla-Thunderbird-ESR

CVE Liste

• CVE-2026-0877
  critical
• CVE-2026-0878
  critical
• CVE-2026-0879
  critical
• CVE-2026-0880
  critical
• CVE-2026-0882
  critical
• CVE-2026-0883
  high
• CVE-2026-0884
  critical
• CVE-2026-0885
  high
• CVE-2026-0886
  high
• CVE-2026-0887
  warning
• CVE-2026-0890
  high
• CVE-2026-0891
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com