Mozilla: >> Thunderbird >> 140.17.0 Security Vulnerabilities
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-09-29
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-09-29
JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-09-29
Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-09-29
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-09-29
Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVSS Score
8.1
EPSS Score
0.002
Published
2026-09-29
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-09-29
Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVSS Score
9.6
EPSS Score
0.003
Published
2026-09-29
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-09-29
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVSS Score
9.6
EPSS Score
0.003
Published
2026-09-29