BugRater
Early access. This site has moved to bugrater.com.

Security releases

Mozilla

Security Vulnerabilities fixed in Thunderbird 160

MFSA2026-128 Nov 10, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-128. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-128/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

104 lines
All 104 CVEs 104 Additional recognition 0 Unclaimed only
Showing 1–50 of 104 , page 1 of 3
CVE-2026-126132 BR2026-0000-046101 unclaimed
High: Attachments could be replaced with local file content when forwarding
Credited as Christopher Bohn (Protectstar Inc.)
CVE-2026-126133 BR2026-0000-046102 unclaimed
Moderate: Calendar server credentials could be sent to an HTTP proxy
Credited as Christopher Bohn (Protectstar Inc.)
CVE-2026-126134 BR2026-0000-046103 unclaimed
Moderate: Feed subscriptions could leak NTLM credentials on Windows
Credited as Magnus Melin
CVE-2026-126135 BR2026-0000-046104 unclaimed
Moderate: SMTP and POP3 response injection when using STARTTLS
Credited as Ibrahim Alghamdi
CVE-2026-126136 BR2026-0000-046105 unclaimed
Moderate: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts
Credited as Álvaro Chico Martínez
CVE-2026-120572 BR2026-0000-046106 unclaimed
High: Incorrect boundary conditions in the Layout: Block and Inline component
Credited as Mozilla
CVE-2026-124852 BR2026-0000-046107 unclaimed
High: Incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-124853 BR2026-0000-046108 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
Credited as Mozilla
CVE-2026-124854 BR2026-0000-046109 unclaimed
High: Privilege escalation in the DOM: Navigation component
Credited as Mozilla
CVE-2026-124855 BR2026-0000-046110 unclaimed
High: Sandbox escape in the DOM: Navigation component
Credited as Tran Quac
CVE-2026-124856 BR2026-0000-046111 unclaimed
High: Incorrect boundary conditions in the Networking: HTTP component
Credited as Mozilla
CVE-2026-124857 BR2026-0000-046112 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-124858 BR2026-0000-046113 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Amy Burnett of OpenAI
CVE-2026-124859 BR2026-0000-046114 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
Credited as Mozilla
CVE-2026-124860 BR2026-0000-046115 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-124861 BR2026-0000-046116 unclaimed
High: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
Credited as Mozilla
CVE-2026-124862 BR2026-0000-046117 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-124863 BR2026-0000-046118 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Mozilla
CVE-2026-124864 BR2026-0000-046119 unclaimed
High: Sandbox escape due to use-after-free in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-124865 BR2026-0000-046120 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-124866 BR2026-0000-046121 unclaimed
High: Use-after-free in the Layout component
Credited as Mozilla
CVE-2026-124867 BR2026-0000-046122 unclaimed
High: Use-after-free in the DOM: Editor component
Credited as Mozilla
CVE-2026-124868 BR2026-0000-046123 unclaimed
High: Incorrect boundary conditions in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-124869 BR2026-0000-046124 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-124870 BR2026-0000-046125 unclaimed
High: Incorrect boundary conditions in the JavaScript: GC component
Credited as Mozilla
CVE-2026-124871 BR2026-0000-046126 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Mozilla
CVE-2026-124872 BR2026-0000-046127 unclaimed
High: Use-after-free in the Cycle Collector component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124873 BR2026-0000-046128 unclaimed
High: Invalid pointer in the DOM: Editor component
Credited as Mozilla
CVE-2026-124874 BR2026-0000-046129 unclaimed
High: Same-origin policy bypass in the Networking: HTTP component
Credited as Minseong Kim
CVE-2026-124875 BR2026-0000-046130 unclaimed
High: Incorrect boundary conditions in the DOM: CSS Object Model component
Credited as Mozilla
CVE-2026-124876 BR2026-0000-046131 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as Mozilla
CVE-2026-124877 BR2026-0000-046132 unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124878 BR2026-0000-046133 unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124879 BR2026-0000-046134 unclaimed
High: Invalid pointer in the Networking: Cache component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124880 BR2026-0000-046135 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124881 BR2026-0000-046136 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124882 BR2026-0000-046137 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124883 BR2026-0000-046138 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124884 BR2026-0000-046139 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124885 BR2026-0000-046140 unclaimed
High: Use-after-free in the Graphics: Text component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124886 BR2026-0000-046141 unclaimed
High: Invalid pointer in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124887 BR2026-0000-046142 unclaimed
High: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124888 BR2026-0000-046143 unclaimed
High: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124889 BR2026-0000-046144 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124890 BR2026-0000-046145 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124891 BR2026-0000-046146 unclaimed
High: Incorrect boundary conditions in the DOM: Selection component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124892 BR2026-0000-046147 unclaimed
High: Use-after-free in the JavaScript: GC component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124893 BR2026-0000-046148 unclaimed
High: Use-after-free in the DOM: Workers component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124894 BR2026-0000-046149 unclaimed
High: Use-after-free in the Networking: Cookies component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-124895 BR2026-0000-046150 unclaimed
High: Use-after-free in the Storage: localStorage & sessionStorage component
Credited as OpenAI Codex Security (kylebot)