Mozilla Thunderbird vulnerabilities and fixes
Exploited and high-severity Mozilla Thunderbird vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.5CVE-2026-118180Matrix homeserver could redirect the chat session to a local file or network shareVerify fixMozilla Thunderbird
1 min read - 8.8CVE-2026-118179Request forgery via news: linksVerify fixMozilla Thunderbird
1 min read - 9.1CVE-2026-118177Calendar discovery accepted local file and remote network share locationsVerify fixMozilla Thunderbird
1 min read - 8.1CVE-2026-118176Bypass of remote UNC path restriction in mailbox: URLsVerify fixMozilla Thunderbird
1 min read - 7.5CVE-2026-118175Content of other messages could be included when replying to a crafted messageVerify fixMozilla Thunderbird
1 min read