Threat database

971 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.4%	CVE-2026-8092Mozilla Thunderbird · Vulnerability High8.1EPSS 0.4%2026-05-07CVE Database V5CVE-2026-8092 Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-05-07
Critical	9.8	EPSS 0.5%	CVE-2026-8091Mozilla Firefox · Unchecked Error Condition Critical9.8EPSS 0.5%2026-05-07CVE Database V5CVE-2026-8091 Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2. EPSS 0.5%Vulnerability Mozilla #ghsa-jx5x-3wf9-9rhg #cwe-754 #cwe-805	CVE Database V5	2026-05-07
High	7.3	EPSS 0.3%	CVE-2026-8090Mozilla Firefox · Vulnerability High7.3EPSS 0.3%2026-05-07CVE Database V5CVE-2026-8090 Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-05-07
Critical	9.6	EPSS 0.3%	CVE-2026-7321Mozilla Firefox · Buffer Overflow Critical9.6EPSS 0.3%2026-04-28CVE Database V5CVE-2026-7321 Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-28
High	7.3	EPSS 0.3%	CVE-2026-7324Mozilla Thunderbird · Memory Buffer Overflow High7.3EPSS 0.3%2026-04-28CVE Database V5CVE-2026-7324 Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-28
High	7.3	EPSS 0.4%	CVE-2026-7323Mozilla Thunderbird · Memory Buffer Overflow High7.3EPSS 0.4%2026-04-28CVE Database V5CVE-2026-7323 Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-04-28
High	7.3	EPSS 0.3%	CVE-2026-7322Mozilla Thunderbird · Memory Buffer Overflow High7.3EPSS 0.3%2026-04-28CVE Database V5CVE-2026-7322 Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-28
High	7.5	EPSS 0.3%	CVE-2026-7320Mozilla Firefox · Memory Buffer Overflow High7.5EPSS 0.3%2026-04-28CVE Database V5CVE-2026-7320 Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-28
High	7.5	EPSS 0.5%	CVE-2026-6786Mozilla Firefox · Vulnerability High7.5EPSS 0.5%2026-04-21CVE Database V5CVE-2026-6786 Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.5	EPSS 0.5%	CVE-2026-6785Mozilla Firefox · Vulnerability High7.5EPSS 0.5%2026-04-21CVE Database V5CVE-2026-6785 Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.5	EPSS 0.4%	CVE-2026-6784Mozilla Firefox · Vulnerability High7.5EPSS 0.4%2026-04-21CVE Database V5CVE-2026-6784 Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-04-21
Medium	5.3	EPSS 0.2%	CVE-2026-6783Mozilla Firefox · Vulnerability Medium5.3EPSS 0.2%2026-04-21CVE Database V5CVE-2026-6783 Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.5	EPSS 0.3%	CVE-2026-6782Mozilla Firefox · Information Exposure High7.5EPSS 0.3%2026-04-21CVE Database V5CVE-2026-6782 Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.5	EPSS 0.3%	CVE-2026-6781Mozilla Firefox · Vulnerability High7.5EPSS 0.3%2026-04-21CVE Database V5CVE-2026-6781 Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.5	EPSS 0.3%	CVE-2026-6780Mozilla Firefox · Vulnerability High7.5EPSS 0.3%2026-04-21CVE Database V5CVE-2026-6780 Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-21
Medium	5.3	EPSS 0.2%	CVE-2026-6779Mozilla Firefox · Memory Buffer Overflow Medium5.3EPSS 0.2%2026-04-21CVE Database V5CVE-2026-6779 Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-04-21
Medium	5.3	EPSS 0.3%	CVE-2026-6778Mozilla Firefox · Vulnerability Medium5.3EPSS 0.3%2026-04-21CVE Database V5CVE-2026-6778 Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-04-21
Medium	5.3	EPSS 0.2%	CVE-2026-6777Mozilla Firefox · Vulnerability Medium5.3EPSS 0.2%2026-04-21CVE Database V5CVE-2026-6777 Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-04-21
High	7.8	EPSS 0.1%	CVE-2026-6776Mozilla Firefox · Memory Buffer Overflow High7.8EPSS 0.1%2026-04-21CVE Database V5CVE-2026-6776 Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. EPSS 0.1%Vulnerability Mozilla	CVE Database V5	2026-04-21
Medium	5.3	EPSS 0.2%	CVE-2026-6775Mozilla Firefox · Memory Buffer Overflow Medium5.3EPSS 0.2%2026-04-21CVE Database V5CVE-2026-6775 Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-04-21

Page 27 of 50