BugRater
Early access. This site has moved to bugrater.com.

Security releases

Mozilla

Security Vulnerabilities fixed in Thunderbird 153.7

MFSA2026-129 Nov 10, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-129. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-129/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

87 lines
All 87 CVEs 87 Additional recognition 0 Unclaimed only
Showing 1–50 of 87 , page 1 of 2
CVE-2026-126132 BR2026-0000-046014 unclaimed
High: Attachments could be replaced with local file content when forwarding
Credited as Christopher Bohn (Protectstar Inc.)
CVE-2026-126133 BR2026-0000-046015 unclaimed
Moderate: Calendar server credentials could be sent to an HTTP proxy
Credited as Christopher Bohn (Protectstar Inc.)
CVE-2026-126134 BR2026-0000-046016 unclaimed
Moderate: Feed subscriptions could leak NTLM credentials on Windows
Credited as Magnus Melin
CVE-2026-126135 BR2026-0000-046017 unclaimed
Moderate: SMTP and POP3 response injection when using STARTTLS
Credited as Ibrahim Alghamdi
CVE-2026-126136 BR2026-0000-046018 unclaimed
Moderate: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts
Credited as Álvaro Chico Martínez
CVE-2026-124853 BR2026-0000-046019 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
Credited as Mozilla
CVE-2026-124854 BR2026-0000-046020 unclaimed
High: Privilege escalation in the DOM: Navigation component
Credited as Mozilla
CVE-2026-124855 BR2026-0000-046021 unclaimed
High: Sandbox escape in the DOM: Navigation component
Credited as Tran Quac
CVE-2026-124856 BR2026-0000-046022 unclaimed
High: Incorrect boundary conditions in the Networking: HTTP component
Credited as Mozilla
CVE-2026-124857 BR2026-0000-046023 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-124858 BR2026-0000-046024 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Amy Burnett of OpenAI
CVE-2026-124859 BR2026-0000-046025 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
Credited as Mozilla
CVE-2026-124860 BR2026-0000-046026 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-124861 BR2026-0000-046027 unclaimed
High: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
Credited as Mozilla
CVE-2026-124862 BR2026-0000-046028 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-118007 BR2026-0000-046029 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as Mozilla
CVE-2026-124863 BR2026-0000-046030 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Mozilla
CVE-2026-124864 BR2026-0000-046031 unclaimed
High: Sandbox escape due to use-after-free in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-124865 BR2026-0000-046032 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-124866 BR2026-0000-046033 unclaimed
High: Use-after-free in the Layout component
Credited as Mozilla
CVE-2026-124868 BR2026-0000-046034 unclaimed
High: Incorrect boundary conditions in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-124869 BR2026-0000-046035 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-124870 BR2026-0000-046036 unclaimed
High: Incorrect boundary conditions in the JavaScript: GC component
Credited as Mozilla
CVE-2026-124872 BR2026-0000-046037 unclaimed
High: Use-after-free in the Cycle Collector component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124873 BR2026-0000-046038 unclaimed
High: Invalid pointer in the DOM: Editor component
Credited as Mozilla
CVE-2026-124874 BR2026-0000-046039 unclaimed
High: Same-origin policy bypass in the Networking: HTTP component
Credited as Minseong Kim
CVE-2026-124875 BR2026-0000-046040 unclaimed
High: Incorrect boundary conditions in the DOM: CSS Object Model component
Credited as Mozilla
CVE-2026-124876 BR2026-0000-046041 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as Mozilla
CVE-2026-124877 BR2026-0000-046042 unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124879 BR2026-0000-046043 unclaimed
High: Invalid pointer in the Networking: Cache component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124880 BR2026-0000-046044 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124881 BR2026-0000-046045 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124882 BR2026-0000-046046 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124883 BR2026-0000-046047 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124884 BR2026-0000-046048 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124885 BR2026-0000-046049 unclaimed
High: Use-after-free in the Graphics: Text component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124886 BR2026-0000-046050 unclaimed
High: Invalid pointer in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124887 BR2026-0000-046051 unclaimed
High: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124888 BR2026-0000-046052 unclaimed
High: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124889 BR2026-0000-046053 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124890 BR2026-0000-046054 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124891 BR2026-0000-046055 unclaimed
High: Incorrect boundary conditions in the DOM: Selection component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124892 BR2026-0000-046056 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124893 BR2026-0000-046057 unclaimed
High: Use-after-free in the DOM: Workers component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124894 BR2026-0000-046058 unclaimed
High: Use-after-free in the Networking: Cookies component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124895 BR2026-0000-046059 unclaimed
High: Use-after-free in the Storage: localStorage & sessionStorage component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124896 BR2026-0000-046060 unclaimed
High: Invalid pointer in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124897 BR2026-0000-046061 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124898 BR2026-0000-046062 unclaimed
High: Use-after-free in the DOM: Editor component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124899 BR2026-0000-046063 unclaimed
High: Use-after-free in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)