Multiples vulnérabilités dans Mozilla Thunderbird (23 juillet 2026)
Mozilla Thunderbird contains multiple vulnerabilities that could lead to data compromise, security policy bypass, denial of service, remote code execution, and privilege escalation. These vulnerabilities are present in various Thunderbird versions and could be exploited by attackers. Users are advised to refer to Mozilla's security advisories for detailed information and patches.
Mozilla has announced multiple security vulnerabilities affecting Mozilla Thunderbird. These vulnerabilities could allow an attacker to compromise user data, bypass security policies, cause a denial of service, execute code remotely, and escalate privileges. The vulnerabilities are present across several Thunderbird versions, including ESR (Extended Support Release) versions prior to 140.13 and standard versions prior to 153.
CERT-FR has published a security advisory detailing these issues. The advisory directs users to Mozilla's security advisories for specific details and instructions on how to apply the necessary patches.
Key vulnerabilities include: CVE-2026-14899, CVE-2026-15718, CVE-2026-15719, CVE-2026-16349, CVE-2026-16350, CVE-2026-16351, CVE-2026-16352, CVE-2026-16353, CVE-2026-16354, CVE-2026-16355, CVE-2026-16356, CVE-2026-16357, CVE-2026-16358, CVE-2026-16359, CVE-2026-16360, CVE-2026-16361, CVE-2026-16362, CVE-2026-16363, CVE-2026-16364, CVE-2026-16365, CVE-2026-16366, CVE-2026-16367, CVE-2026-16368, CVE-2026-16369, CVE-2026-16370, CVE-2026-16371, CVE-2026-16372, CVE-2026-16374, CVE-2026-16375, CVE-2026-16376, CVE-2026-16377, CVE-2026-16378, CVE-2026-16379, CVE-2026-16380, CVE-2026-16381, CVE-2026-16382, CVE-2026-16383, CVE-2026-16384, CVE-2026-16385, CVE-2026-16386, CVE-2026-16387, CVE-2026-16388, CVE-2026-16389, CVE-2026-16390, CVE-2026-16391, CVE-2026-16392, CVE-2026-16393, CVE-2026-16394, CVE-2026-16395, CVE-2026-16396, CVE-2026-16398, CVE-2026-16399, CVE-2026-16400, CVE-2026-16401, CVE-2026-16402, CVE-2026-16403, CVE-2026-16405, CVE-2026-16406, CVE-2026-16407, CVE-2026-16408, CVE-2026-16409, CVE-2026-16410, CVE-2026-16411, CVE-2026-16412.