Mozilla Thunderbird Multiple Vulnerabilities

October 2, 2026 · HKCERT · Severity: HIGH

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, security restriction bypass, sensitive information disclosure, remote code execution, data manipulation and spoofing on the targeted system. Impact Remote Code Execution Denial of Service Elevation of Privilege Security Restriction Bypass Information Disclosure Data Manipulation Spoofing System / Technologies affected Versions prior to:   Thunderbird 140.17 Thunderbird 153.4 Thunderbird 157 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor:   Thunderbird 140.17 Thunderbird 153.4 Thunderbird 157