{"schema_version":1,"title":"Mozilla Thunderbird-Esr vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 66 vulnerabilities in Mozilla Thunderbird-Esr: 0 in the last 7 days and 37 in the last 90 days, 24 of them critical and 2 exploited in the wild. The most recent, CVE-2026-92079, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/thunderbird-esr","json_url":"https://junglewise.ai/threats/technologies/thunderbird-esr.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/thunderbird-esr","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":33,"all_time":66,"critical":24,"exploited":2,"last_7_days":0,"last_30_days":25,"last_90_days":37,"last_365_days":64},"latest":[{"cve":"CVE-2026-92079","cvss":9.1,"epss":0.005,"slug":"cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32","title":"Mozilla Firefox mitigation bypass in Widget: Win32","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:03.56+00:00","url":"https://junglewise.ai/threats/cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32"},{"cve":"CVE-2026-92067","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component","title":"Mozilla Firefox use-after-free in Widget: Gtk component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.403+00:00","url":"https://junglewise.ai/threats/cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component"},{"cve":"CVE-2026-92060","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component","title":"Mozilla Firefox use-after-free in Internationalization component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.51+00:00","url":"https://junglewise.ai/threats/cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component"},{"cve":"CVE-2026-92058","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component","title":"Mozilla Firefox use-after-free in Graphics component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.207+00:00","url":"https://junglewise.ai/threats/cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component"},{"cve":"CVE-2026-92057","cvss":9.1,"epss":0.005,"slug":"cve-2026-92057-mozilla-firefox-mitigation-bypass-in-enterprise-policies","title":"Mozilla Firefox mitigation bypass in Enterprise Policies component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.073+00:00","url":"https://junglewise.ai/threats/cve-2026-92057-mozilla-firefox-mitigation-bypass-in-enterprise-policies"},{"cve":"CVE-2026-92056","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92056-mozilla-firefox-use-after-free-in-graphics-text-component","title":"Mozilla Firefox use-after-free in Graphics Text component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:59.947+00:00","url":"https://junglewise.ai/threats/cve-2026-92056-mozilla-firefox-use-after-free-in-graphics-text-component"},{"cve":"CVE-2026-92055","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92055-mozilla-firefox-privilege-escalation-in-devtools-component","title":"Mozilla Firefox privilege escalation in DevTools component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:59.37+00:00","url":"https://junglewise.ai/threats/cve-2026-92055-mozilla-firefox-privilege-escalation-in-devtools-component"},{"cve":"CVE-2026-92054","cvss":8.8,"epss":0.0048,"slug":"cve-2026-92054-mozilla-firefox-privilege-escalation-in-memory-component","title":"Mozilla Firefox privilege escalation in Memory component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:58.8+00:00","url":"https://junglewise.ai/threats/cve-2026-92054-mozilla-firefox-privilege-escalation-in-memory-component"},{"cve":"CVE-2026-92048","cvss":9,"epss":0.0043,"slug":"cve-2026-92048-mozilla-firefox-sandbox-escape-in-widget-win32-component","title":"Mozilla Firefox sandbox escape in Widget: Win32 component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:16:56.493+00:00","url":"https://junglewise.ai/threats/cve-2026-92048-mozilla-firefox-sandbox-escape-in-widget-win32-component"},{"cve":"CVE-2026-92047","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92047-mozilla-firefox-privilege-escalation-in-crash-reporting","title":"Mozilla Firefox privilege escalation in Crash Reporting","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:56.373+00:00","url":"https://junglewise.ai/threats/cve-2026-92047-mozilla-firefox-privilege-escalation-in-crash-reporting"},{"cve":"CVE-2026-92043","cvss":8.8,"epss":0.0048,"slug":"cve-2026-92043-mozilla-firefox-privilege-escalation-in-audio-video-component","title":"Mozilla Firefox privilege escalation in Audio/Video component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:55.75+00:00","url":"https://junglewise.ai/threats/cve-2026-92043-mozilla-firefox-privilege-escalation-in-audio-video-component"},{"cve":"CVE-2026-92031","cvss":6.5,"epss":0.0033,"slug":"cve-2026-92031-mozilla-firefox-information-disclosure-in-imagelib","title":"Mozilla Firefox information disclosure in ImageLib","severity":"medium","exploited":false,"published_at":"2026-09-15T13:16:54.323+00:00","url":"https://junglewise.ai/threats/cve-2026-92031-mozilla-firefox-information-disclosure-in-imagelib"},{"cve":"CVE-2026-92016","cvss":8.8,"epss":0.0033,"slug":"cve-2026-92016-mozilla-firefox-use-after-free-in-disability-access-apis","title":"Mozilla Firefox use-after-free in Disability Access APIs","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:51.247+00:00","url":"https://junglewise.ai/threats/cve-2026-92016-mozilla-firefox-use-after-free-in-disability-access-apis"},{"cve":"CVE-2026-92015","cvss":8.8,"epss":0.0028,"slug":"cve-2026-92015-mozilla-firefox-privilege-escalation-in-webextensions","title":"Mozilla Firefox privilege escalation in WebExtensions","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:51.1+00:00","url":"https://junglewise.ai/threats/cve-2026-92015-mozilla-firefox-privilege-escalation-in-webextensions"},{"cve":"CVE-2026-84145","cvss":7.5,"epss":0.0037,"slug":"cve-2026-84145-mozilla-thunderbird-memory-corruption-and-security-defects","title":"Mozilla Thunderbird memory corruption and security defects","severity":"high","exploited":false,"published_at":"2026-09-01T13:20:08.673+00:00","url":"https://junglewise.ai/threats/cve-2026-84145-mozilla-thunderbird-memory-corruption-and-security-defects"},{"cve":"CVE-2026-84144","cvss":7.5,"epss":0.0043,"slug":"cve-2026-84144-mozilla-thunderbird-memory-corruption-in-browser-engine","title":"Mozilla Thunderbird memory corruption in browser engine","severity":"high","exploited":false,"published_at":"2026-09-01T13:20:08.563+00:00","url":"https://junglewise.ai/threats/cve-2026-84144-mozilla-thunderbird-memory-corruption-in-browser-engine"},{"cve":"CVE-2026-84141","cvss":9.8,"epss":0.0063,"slug":"cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib","title":"Mozilla Firefox integer overflow in Graphics: ImageLib","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:08.23+00:00","url":"https://junglewise.ai/threats/cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib"},{"cve":"CVE-2026-84140","cvss":9.8,"epss":0.0029,"slug":"cve-2026-84140-mozilla-firefox-site-isolation-issue-in-dom-navigation-component","title":"Mozilla Firefox site isolation issue in DOM Navigation component","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:08.127+00:00","url":"https://junglewise.ai/threats/cve-2026-84140-mozilla-firefox-site-isolation-issue-in-dom-navigation-component"},{"cve":"CVE-2026-84139","cvss":6.1,"epss":0.0034,"slug":"cve-2026-84139-mozilla-firefox-clickjacking-issue-in-dom-events","title":"Mozilla Firefox clickjacking issue in DOM Events","severity":"medium","exploited":false,"published_at":"2026-09-01T13:20:08.023+00:00","url":"https://junglewise.ai/threats/cve-2026-84139-mozilla-firefox-clickjacking-issue-in-dom-events"},{"cve":"CVE-2026-84134","cvss":9.8,"epss":0.0057,"slug":"cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component","title":"Mozilla Firefox other issue in Profile Backup component","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:07.45+00:00","url":"https://junglewise.ai/threats/cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component"},{"cve":"CVE-2026-84132","cvss":7.5,"epss":0.0044,"slug":"cve-2026-84132-mozilla-firefox-information-disclosure-in-http-networking","title":"Mozilla Firefox information disclosure in HTTP networking","severity":"high","exploited":false,"published_at":"2026-09-01T13:20:07.23+00:00","url":"https://junglewise.ai/threats/cve-2026-84132-mozilla-firefox-information-disclosure-in-http-networking"},{"cve":"CVE-2026-84125","cvss":5.4,"epss":0.0029,"slug":"cve-2026-84125-mozilla-firefox-use-after-free-in-dom-core-html","title":"Mozilla Firefox use-after-free in DOM Core & HTML","severity":"medium","exploited":false,"published_at":"2026-09-01T13:20:06.423+00:00","url":"https://junglewise.ai/threats/cve-2026-84125-mozilla-firefox-use-after-free-in-dom-core-html"},{"cve":"CVE-2026-84124","cvss":5.4,"epss":0.0017,"slug":"cve-2026-84124-mozilla-firefox-use-after-free-in-dom-core-amp-html","title":"Mozilla Firefox use-after-free in DOM Core & HTML","severity":"medium","exploited":false,"published_at":"2026-09-01T13:20:06.29+00:00","url":"https://junglewise.ai/threats/cve-2026-84124-mozilla-firefox-use-after-free-in-dom-core-amp-html"},{"cve":"CVE-2026-84123","cvss":8.8,"epss":0.0044,"slug":"cve-2026-84123-mozilla-firefox-use-after-free-in-webgpu-graphics-component","title":"Mozilla Firefox use-after-free in WebGPU graphics component","severity":"high","exploited":false,"published_at":"2026-09-01T13:20:06.16+00:00","url":"https://junglewise.ai/threats/cve-2026-84123-mozilla-firefox-use-after-free-in-webgpu-graphics-component"},{"cve":"CVE-2026-84118","cvss":5.4,"epss":0.0029,"slug":"cve-2026-84118-mozilla-firefox-use-after-free-in-javascript-gc","title":"Mozilla Firefox use-after-free in JavaScript GC","severity":"medium","exploited":false,"published_at":"2026-09-01T13:20:05.607+00:00","url":"https://junglewise.ai/threats/cve-2026-84118-mozilla-firefox-use-after-free-in-javascript-gc"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":4,"exploited":0,"vulnerabilities":12},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":3,"exploited":0,"vulnerabilities":11},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":3,"exploited":0,"vulnerabilities":14},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Mozilla Firefox","slug":"firefox","vulnerabilities":393,"url":"https://junglewise.ai/threats/technologies/firefox"},{"name":"Mozilla Firefox ESR","slug":"firefox-esr","vulnerabilities":295,"url":"https://junglewise.ai/threats/technologies/firefox-esr"},{"name":"Mozilla Thunderbird","slug":"thunderbird","vulnerabilities":267,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"name":"Mozilla Firefox for iOS","slug":"firefox-for-ios","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/firefox-for-ios"},{"name":"Mozilla Firefox for Android","slug":"firefox-for-android","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/firefox-for-android"},{"name":"Mozilla Firefox Mobile","slug":"firefox-mobile","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/firefox-mobile"},{"name":"Mozilla Firefox Focus","slug":"firefox-focus-for-android","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/firefox-focus-for-android"}],"technology":{"hub":true,"name":"Mozilla Thunderbird-Esr","slug":"thunderbird-esr","vendor":{"name":"Mozilla","slug":"mozilla","url":"https://junglewise.ai/threats/vendors/mozilla"},"aliases":[],"category":"email-client","homepage":"https://www.thunderbird.net/","repo_url":"https://github.com/mozilla/thunderbird-mirror","description":"An Extended Support Release version of the open-source email client designed for organizations requiring long-term stability.","url":"https://junglewise.ai/threats/technologies/thunderbird-esr"},"most_severe":[{"cve":"CVE-2013-1690","cvss":8.8,"slug":"cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability"},{"cve":"CVE-2013-1675","cvss":6.5,"slug":"cve-2013-1675-mozilla-firefox-information-disclosure-vulnerability","title":"Mozilla Firefox Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1675-mozilla-firefox-information-disclosure-vulnerability"},{"cve":"CVE-2026-75874","cvss":10,"epss":0.0046,"slug":"cve-2026-75874-mozilla-firefox-remote-settings-client-sandbox-escape","title":"Mozilla Firefox Remote Settings Client sandbox escape","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:43.5+00:00","url":"https://junglewise.ai/threats/cve-2026-75874-mozilla-firefox-remote-settings-client-sandbox-escape"},{"cve":"CVE-2026-4688","cvss":10,"epss":0.0041,"slug":"cve-2026-4688-mozilla-firefox-and-thunderbird-sandbox-escape-in-disability","title":"Mozilla Firefox and Thunderbird sandbox escape in Disability Access APIs","severity":"critical","exploited":false,"published_at":"2026-03-24T13:16:04.64+00:00","url":"https://junglewise.ai/threats/cve-2026-4688-mozilla-firefox-and-thunderbird-sandbox-escape-in-disability"},{"cve":"CVE-2026-2768","cvss":10,"epss":0.0035,"slug":"cve-2026-2768-mozilla-firefox-and-thunderbird-sandbox-escape-in-indexeddb","title":"Mozilla Firefox and Thunderbird sandbox escape in IndexedDB","severity":"critical","exploited":false,"published_at":"2026-02-24T14:16:25.183+00:00","url":"https://junglewise.ai/threats/cve-2026-2768-mozilla-firefox-and-thunderbird-sandbox-escape-in-indexeddb"},{"cve":"CVE-2026-74964","cvss":9.8,"epss":0.0068,"slug":"cve-2026-74964-mozilla-firefox-integer-overflow-in-graphics-component","title":"Mozilla Firefox integer overflow in Graphics component","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:33.683+00:00","url":"https://junglewise.ai/threats/cve-2026-74964-mozilla-firefox-integer-overflow-in-graphics-component"},{"cve":"CVE-2026-84141","cvss":9.8,"epss":0.0063,"slug":"cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib","title":"Mozilla Firefox integer overflow in Graphics: ImageLib","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:08.23+00:00","url":"https://junglewise.ai/threats/cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib"},{"cve":"CVE-2026-74988","cvss":9.8,"epss":0.0061,"slug":"cve-2026-74988-mozilla-thunderbird-memory-corruption-in-esr-153-0-and-153","title":"Mozilla Thunderbird memory corruption in ESR 153.0 and 153","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:40.687+00:00","url":"https://junglewise.ai/threats/cve-2026-74988-mozilla-thunderbird-memory-corruption-in-esr-153-0-and-153"},{"cve":"CVE-2026-84134","cvss":9.8,"epss":0.0057,"slug":"cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component","title":"Mozilla Firefox other issue in Profile Backup component","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:07.45+00:00","url":"https://junglewise.ai/threats/cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component"},{"cve":"CVE-2026-74985","cvss":9.8,"epss":0.0053,"slug":"cve-2026-74985-mozilla-firefox-privilege-escalation-in-enterprise-policies","title":"Mozilla Firefox privilege escalation in Enterprise Policies","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:40.317+00:00","url":"https://junglewise.ai/threats/cve-2026-74985-mozilla-firefox-privilege-escalation-in-enterprise-policies"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}