Descripción
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- Security vulnerability can be exploited to bypass security restrictions.
- Denial of service vulnerability in IMAP response parser can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Audio/Video: Web Codecs component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics: CanvasWebGL component can be exploited remotely to cause denial of service.
- Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Disability Access APIs component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Service Workers component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Core & HTML component can be exploited to bypass security restrictions.
- Security vulnerability in the Remote Settings Client component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Graphics: WebRender component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the DOM: HTML Parser component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the SVG component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Navigation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Networking component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Networking: HTTP component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the DOM: Streams component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the DOM: Animation component can be exploited remotely to cause denial of service.
- Security vulnerability in the DOM: Notifications component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Networking component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Content Processes component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Audio/Video component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking: HTTP component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
- Security vulnerability in the DOM: Copy & Paste and Drag & Drop component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Crash Reporting component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Widget: Win32 component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Widget: Win32 component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XPConnect component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Graphics: CanvasWebGL component can be exploited to bypass security restrictions.
- Security vulnerability in the Memory component can be exploited to bypass security restrictions.
- Security vulnerability in the DevTools component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics: Text component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Enterprise Policies component can be exploited to bypass security restrictions.
- Information disclosure vulnerability in the Graphics: ImageLib component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the DOM: Editor component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Internationalization component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Security: Process Sandboxing component can be exploited remotely to cause denial of service.
- Security vulnerability in the Session Restore component can be exploited to bypass security restrictions.
- Security vulnerability in the Profile Backup component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Widget: Gtk component can be exploited remotely to execute arbitrary code.
- Security UI vulnerability in the DOM: Navigation component can be exploited to spoof user interface.
- Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the Safe Browsing component can be exploited remotely to cause denial of service.
- Security vulnerability in the Popup Blocker component can be exploited to bypass security restrictions.
- Security vulnerability in the Networking component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Networking component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the SVG component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Security component can be exploited remotely to cause denial of service.
- Security vulnerability in the Widget: Win32 component can be exploited to bypass security restrictions.
Notas informativas originales
Explotación
Public exploits exist for this vulnerability.
Productos relacionados
Lista CVE
- CVE-2026-92005 high
- CVE-2026-92006 critical
- CVE-2026-92007 critical
- CVE-2026-92008 critical
- CVE-2026-92009 critical
- CVE-2026-92010 critical
- CVE-2026-92011 critical
- CVE-2026-92012 critical
- CVE-2026-92013 critical
- CVE-2026-92015 critical
- CVE-2026-92016 critical
- CVE-2026-92017 critical
- CVE-2026-92018 critical
- CVE-2026-92019 unknown
- CVE-2026-92020 critical
- CVE-2026-92022 critical
- CVE-2026-92023 critical
- CVE-2026-92024 critical
- CVE-2026-92025 critical
- CVE-2026-92026 critical
- CVE-2026-92027 critical
- CVE-2026-92028 critical
- CVE-2026-92029 critical
- CVE-2026-92030 unknown
- CVE-2026-92031 unknown
- CVE-2026-92032 unknown
- CVE-2026-92034 unknown
- CVE-2026-92035 unknown
- CVE-2026-92036 unknown
- CVE-2026-92037 unknown
- CVE-2026-92038 unknown
- CVE-2026-92039 unknown
- CVE-2026-92040 critical
- CVE-2026-92041 unknown
- CVE-2026-92042 critical
- CVE-2026-92043 critical
- CVE-2026-92044 unknown
- CVE-2026-92045 unknown
- CVE-2026-92046 critical
- CVE-2026-92047 critical
- CVE-2026-92048 unknown
- CVE-2026-92049 critical
- CVE-2026-92050 unknown
- CVE-2026-92051 unknown
- CVE-2026-92052 critical
- CVE-2026-92053 critical
- CVE-2026-92054 critical
- CVE-2026-92055 critical
- CVE-2026-92056 critical
- CVE-2026-92057 unknown
- CVE-2026-92058 critical
- CVE-2026-92059 unknown
- CVE-2026-92060 critical
- CVE-2026-92061 unknown
- CVE-2026-92062 critical
- CVE-2026-92063 high
- CVE-2026-92064 unknown
- CVE-2026-92065 unknown
- CVE-2026-92066 unknown
- CVE-2026-92067 critical
- CVE-2026-92068 unknown
- CVE-2026-92069 unknown
- CVE-2026-92070 unknown
- CVE-2026-92071 unknown
- CVE-2026-92072 unknown
- CVE-2026-92073 critical
- CVE-2026-92074 unknown
- CVE-2026-92075 unknown
- CVE-2026-92076 unknown
- CVE-2026-92077 high
- CVE-2026-92078 high
- CVE-2026-92079 unknown
- CVE-2026-92238 unknown
- CVE-2026-92239 unknown
- CVE-2026-92240 unknown
Leer más
Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com
¿Has encontrado algún error en la descripción de esta vulnerabilidad? ¡Háznoslo saber!