Veille CVE

Mardi 13 octobre 2026

41 CVE

Critique 2 Élevée 0 Moyenne 33 Faible 0 Non évaluée 6 Exploitées (KEV) Tri : plus récentes « Mozilla Thunderbird » ✕
  1. CVE-2026-109783 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

  2. CVE-2026-109782 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

  3. CVE-2026-109781 6.5 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  4. CVE-2026-109780 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  5. CVE-2026-109779 4.2 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  6. CVE-2026-109777 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  7. CVE-2026-109775 6.5 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  8. CVE-2026-109774 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  9. CVE-2026-109773 6.5 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  10. CVE-2026-109772 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  11. CVE-2026-109771 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  12. CVE-2026-109769 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  13. CVE-2026-109768 6.5 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  14. CVE-2026-109767 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  15. CVE-2026-109765 4.2 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  16. CVE-2026-109763 – Non évaluée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  17. CVE-2026-109761 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  18. CVE-2026-109752 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  19. CVE-2026-109751 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  20. CVE-2026-109749 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  21. CVE-2026-109748 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  22. CVE-2026-109742 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  23. CVE-2026-109741 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  24. CVE-2026-109738 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  25. CVE-2026-109735 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  26. CVE-2026-109732 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  27. CVE-2026-109729 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  28. CVE-2026-109728 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  29. CVE-2026-109727 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  30. CVE-2026-109726 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  31. CVE-2026-109725 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  32. CVE-2026-109724 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  33. CVE-2026-109719 4.2 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  34. CVE-2026-109718 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  35. CVE-2026-109717 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  36. CVE-2026-109713 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  37. CVE-2026-109711 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  38. CVE-2026-109710 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  39. CVE-2026-109707 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  40. CVE-2026-109706 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  41. CVE-2026-109705 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.