Descripción
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Audio/Video: Playback component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Widget component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Storage: Quota Manager component can be exploited remotely to cause denial of service.
- Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Content Processes component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the Networking: JAR component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Networking: Cache component can be exploited remotely to execute arbitrary code.
- Security vulnerability can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Storage: IndexedDB component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Graphics component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics: Canvas2D component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XSLT component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics: WebRender component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Audio/Video component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Layout: Text and Fonts component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the XUL component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the JavaScript: WebAssembly component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Internationalization component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Graphics: WebRender component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Disability Access APIs component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DLL Services component can be exploited to bypass security restrictions.
- Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Graphics: WebGPU component can be exploited remotely to cause denial of service.
- Security vulnerability in the DOM: Service Workers component can be exploited to bypass security restrictions.
- Security vulnerability in the DevTools component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the JavaScript Engine: JIT component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the CSS Parsing and Computation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Widget: Gtk component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the XPCOM component can be exploited remotely to cause denial of service.
- Security vulnerability in the Address Bar component can be exploited to bypass security restrictions.
- Security UI vulnerability in the Networking: HTTP component can be exploited to spoof user interface.
- Security vulnerability in the Places component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the JavaScript Engine: JIT component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Storage: StorageManager component can be exploited remotely to cause denial of service.
- Security vulnerability in the Bookmarks & History component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: UI Events & Focus Handling component can be exploited remotely to execute arbitrary code.
Notas informativas originales
Productos relacionados
Lista CVE
- CVE-2026-100756 critical
- CVE-2026-100757 critical
- CVE-2026-100758 critical
- CVE-2026-100759 critical
- CVE-2026-100760 critical
- CVE-2026-100762 critical
- CVE-2026-100765 critical
- CVE-2026-100766 warning
- CVE-2026-100767 critical
- CVE-2026-100769 critical
- CVE-2026-100770 critical
- CVE-2026-100771 critical
- CVE-2026-100772 critical
- CVE-2026-100773 critical
- CVE-2026-100774 critical
- CVE-2026-100775 critical
- CVE-2026-100776 critical
- CVE-2026-100777 critical
- CVE-2026-100778 critical
- CVE-2026-100779 critical
- CVE-2026-100780 critical
- CVE-2026-100781 critical
- CVE-2026-100782 critical
- CVE-2026-100783 warning
- CVE-2026-100784 critical
- CVE-2026-100785 critical
- CVE-2026-100786 critical
- CVE-2026-100787 critical
- CVE-2026-100788 critical
- CVE-2026-100789 critical
- CVE-2026-100790 critical
- CVE-2026-100791 critical
- CVE-2026-100792 high
- CVE-2026-100794 critical
- CVE-2026-100797 critical
- CVE-2026-100798 critical
- CVE-2026-100800 critical
- CVE-2026-100801 critical
- CVE-2026-100803 critical
- CVE-2026-100806 warning
- CVE-2026-100807 critical
- CVE-2026-100808 critical
- CVE-2026-100809 critical
- CVE-2026-100811 critical
- CVE-2026-100812 high
- CVE-2026-100814 critical
- CVE-2026-100815 critical
- CVE-2026-100816 critical
- CVE-2026-100818 critical
- CVE-2026-100819 critical
- CVE-2026-100820 critical
- CVE-2026-100821 warning
- CVE-2026-100822 high
- CVE-2026-100824 critical
- CVE-2026-100825 critical
- CVE-2026-100826 high
- CVE-2026-100828 critical
- CVE-2026-100829 critical
- CVE-2026-100830 critical
- CVE-2026-100831 critical
- CVE-2026-100832 critical
- CVE-2026-96869 warning
- CVE-2026-103500 high
Leer más
Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com
¿Has encontrado algún error en la descripción de esta vulnerabilidad? ¡Háznoslo saber!