Security Vulnerabilities fixed in Thunderbird 140.13 — Mozilla

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherwww.mozilla.org

Article IDNo stable ID in source URL

Verified snapshot28 Sept 2026, 08:35 UTC

Linked CVEs33

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-16371Privilege escalation in the DOM: Navigation component
CVE-2026-14899Off-by-one out of bounds read in MIME header parser for forwarding
CVE-2026-16379Privilege escalation in the DOM: Content Processes component
CVE-2026-16396Privilege escalation in WebExtensions
CVE-2026-16361Memory safety bugs fixed in Thunderbird ESR 140.13
CVE-2026-16360Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
CVE-2026-16412Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
CVE-2026-15719Site isolation issue in the DOM: Navigation component
CVE-2026-15718Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-16405Information disclosure in the Networking: WebSockets component
CVE-2026-16359Incorrect boundary conditions in the Audio/Video: GMP component
CVE-2026-16391Information disclosure in the Storage: IndexedDB component
CVE-2026-16390Mitigation bypass in the Enterprise Policies component
CVE-2026-16387Site isolation issue in the Networking component
CVE-2026-16383Mitigation bypass in the DOM: Networking component
CVE-2026-16381Same-origin policy bypass in the Networking: DNS component
CVE-2026-16358Site isolation issue in the Graphics: WebRender component
CVE-2026-16377Mitigation bypass in the PDF Viewer component
CVE-2026-16375Site isolation issue in the Networking: HTTP component
CVE-2026-16374Information disclosure in the Framework component in DevTools
CVE-2026-16357Incorrect boundary conditions in the Graphics component
CVE-2026-16356Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16355JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-16369Integer overflow in the JavaScript: WebAssembly component
CVE-2026-16368Incorrect boundary conditions in the JavaScript: WebAssembly component
CVE-2026-16354Information disclosure in the Graphics: ImageLib component
CVE-2026-16353Invalid pointer in the DOM: Bindings (WebIDL) component
CVE-2026-16363JIT miscompilation in the JavaScript: WebAssembly component
CVE-2026-16352Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16351Sandbox escape due to use-after-free in the DOM: Navigation component
CVE-2026-16362Use-after-free in the WebRTC: Audio/Video component
CVE-2026-16350Incorrect boundary conditions in the Audio/Video: cubeb component
CVE-2026-16349Same-origin policy bypass in the DOM: Navigation component

Source and provenance

Original title: Security Vulnerabilities fixed in Thunderbird 140.13 — Mozilla. Captured 28 Sept 2026, 08:35 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗