[CVE-2026-92005 ] Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
High(7.5) Interessata Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.16.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.16.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.16.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 140.16.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-84133 ] Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
Critical(9.8) Interessata Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 153.4.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-16365 ] Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.
High(8.8) Interessata Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.15.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.15.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.15.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 140.15.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-74934 ] Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.14.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.14.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.14.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.14.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-14899 ] The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after t
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.13.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-57962 ] A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client u
Medium(5.3) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.12.1-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-12289 ] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
High(8.8) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.12.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-8388 ] Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.11.1-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-8090 ] Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.10.2-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-7320 ] Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.10.1-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-6746 ] Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.9.1-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-5731 ] Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and w
Critical(9.8) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.9.1-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-2757 ] Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.
High(8.8) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.8.0-1.1
nvd · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-2447 ] libvpx vulnerability
High(8.1) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.2-1.1
Version impact unknown
usn · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.2-1.1
Version impact unknown
usn · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.2-1.1
Version impact unknown
usn · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.7.2-1.1
usn · MozillaThunderbird · opensuse · tumbleweed
[CVE-2026-0818 ] thunderbird: CVE-2026-0818
Low(3.1) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.7.1-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
[CVE-2025-14321 ] firefox-esr: CVE-2025-14321
Critical(9.8) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.6.0-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
[CVE-2025-14327 ] firefox-esr: CVE-2025-14327
High(7.5) Sconosciuto Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.7.0-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
[CVE-2023-0547 ] thunderbird: CVE-2023-0547
High(7.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 7:24:33 PM UTC
Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.10.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.10.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.10.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 102.10.0-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
[CVE-2023-0616 ] thunderbird: CVE-2023-0616
Medium(6.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 7:24:34 PM UTC
Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.8.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.8.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.8.0-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 102.8.0-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
[CVE-2022-46871 ] firefox-esr: CVE-2022-46871
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:31:01 PM UTC
Dettagli (4) 140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 102.7.1-1.1
Version impact unknown
dsa · MozillaThunderbird · opensuse · tumbleweed
140.14.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 102.7.1-1.1
dsa · MozillaThunderbird · opensuse · tumbleweed
