Thunderbird
Security incidents tagged Thunderbird. Newest first.
1 Thunderbird incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 0
- Longest quiet run: 0 days
- Patched
Firefox 159 and Firefox ESR 153.6 and 115.44 fix 167 bugs, including 13 sandbox escapes
Mozilla's October 27 Firefox release fixes 167 CVEs in Firefox 159 (108 rated high, 52 moderate, 7 low), 145 in Firefox ESR 153.6 and 80 in Firefox ESR 115.44. Thirteen of the Firefox 159 fixes are sandbox escapes (in components such as WebRender, Canvas WebGL, XPCOM, Print Preview and Form Manager), and the rest include many use-after-free and JIT bugs in the JavaScript engine, layout, DOM and WebRTC. The large count comes partly from a change in how Mozilla publishes advisories: it no longer rolls internally found memory-safety bugs into one CVE and now issues one per bug. Mozilla's advisories don't mention exploitation in the wild. Update Firefox to 159, or ESR to 153.6 or 115.44.
Mozilla Firefox and Firefox ESRSince Oct 27, 2026