Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface and execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Multiple use-after-free vulnerabilities can be explotied remotely to cause denial of service;
2. An unspecified vulnerability in the addressbar can be exploited remotely via specially crafted URL to spoof user interface;
3. Multiple memory corruption vulnerabilities can be exploited remotely to execute arbitrary code;

Mozilla Thunderbird earlier than 52.6

Update to the latest version
Download Mozilla Thunderbird

Mozilla Foundation Security Advisory 2018-04

CVE-2018-5095
CVE-2018-5096
CVE-2018-5097
CVE-2018-5098
CVE-2018-5099
CVE-2018-5102
CVE-2018-5103
CVE-2018-5104
CVE-2018-5117
CVE-2018-5089