Kaspersky ID:
KLA90845
Erkennungsdatum:
01/13/2026
Aktualisiert:
01/23/2026

Beschreibung

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability in GC can be exploited to cause denial of service or execute arbitrary code.
  2. Security vulnerability in DOM can be exploited to bypass security restrictions.
  3. Use after free vulnerability in IPC can be exploited to cause denial of service or execute arbitrary code.
  4. Security UI vulnerability in Copy & Paste and Drag & Drop can be exploited to spoof user interface.
  5. Memory safety vulnerability can be exploited to execute arbitrary code.
  6. Denial of service vulnerability can be exploited remotely to cause denial of service.
  7. Information disclosure vulnerability in Networking for Windows can be exploited to obtain sensitive information.
  8. Use after free vulnerability in JavaScript Engine can be exploited to cause denial of service or execute arbitrary code.
  9. Integer overflow vulnerability in Graphics can be exploited to cause denial of service.
  10. Information disclosure vulnerability in XML can be exploited to obtain sensitive information.

Ursprüngliche Informationshinweise

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

CVE Liste

  • CVE-2026-0877
    critical
  • CVE-2026-0878
    critical
  • CVE-2026-0879
    critical
  • CVE-2026-0880
    critical
  • CVE-2026-0881
    critical
  • CVE-2026-0882
    critical
  • CVE-2026-0883
    high
  • CVE-2026-0884
    critical
  • CVE-2026-0885
    high
  • CVE-2026-0886
    high
  • CVE-2026-0887
    warning
  • CVE-2026-0888
    high
  • CVE-2026-0889
    critical
  • CVE-2026-0890
    high
  • CVE-2026-0891
    critical
  • CVE-2026-0892
    critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.