Windows winget Mozilla
Mozilla Thunderbird
Current version
159.0
winget:Mozilla.Thunderbird
Version 159.0 of Mozilla Thunderbird on Windows remains exposed: 82 open CVEs out of 2393 referenced.
- Known vulnerabilities
- 2,393
- Still open
- 82
- KEV open
- 0
- Max CVSS (open)
- 9.6
12 total (history)
10.0 historical
Recommended action
Update to ≥ 160 to clear the 82 open CVEs.
Known vulnerabilities (CVE)
82 open
118 fixed
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-126136
Open
N/A
Fixed in: 160
|
|
CVE-2026-126135
Open
N/A
Fixed in: 160
|
|
CVE-2026-126134
Open
N/A
Fixed in: 160
|
|
CVE-2026-126133
Open
N/A
Fixed in: 160
|
|
CVE-2026-126132
Open
N/A
Fixed in: 160
|
|
CVE-2026-124951
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124948
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124942
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124941
Open
MEDIUM 4.3
Network Fixed in: 160
|
|
CVE-2026-124940
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124939
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124938
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124935
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124934
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124933
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124932
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124931
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124930
Open
MEDIUM 4.3
Network Fixed in: 160
|
|
CVE-2026-124929
Open
MEDIUM 4.3
Network Fixed in: 160
|
|
CVE-2026-124927
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124926
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124924
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124922
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124919
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124918
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124917
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-124915
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124914
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124913
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124912
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124910
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124909
Open
MEDIUM 4.3
Network Fixed in: 160
|
|
CVE-2026-124907
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124906
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124905
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124903
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-124902
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124901
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124899
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124898
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124897
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124896
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124895
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124894
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124893
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124892
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124891
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124890
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124889
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124888
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124887
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124886
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124885
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124884
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124883
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124882
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124881
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124880
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124879
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124877
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124876
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124875
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124874
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124873
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124872
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124870
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124869
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124868
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124866
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124865
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124864
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-124863
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124862
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124861
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-124860
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124859
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-124858
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124857
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124856
Open
HIGH 8.8
Network Fixed in: 160
|
|
CVE-2026-124855
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124854
Open
HIGH · vendor
Fixed in: 160
|
|
CVE-2026-124853
Open
CRITICAL 9.6
Network Fixed in: 160
|
|
CVE-2026-118180
Fixed
HIGH 7.5
Network Fixed in: 159
|
|
CVE-2026-118179
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118178
Fixed
MEDIUM 5.7
Network Fixed in: 159
|
|
CVE-2026-118177
Fixed
CRITICAL 9.1
Network Fixed in: 159
|
|
CVE-2026-118176
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-118175
Fixed
HIGH 7.5
Network Fixed in: 159
|
|
CVE-2026-118174
Fixed
MEDIUM 6.5
Network Fixed in: 159
|
|
CVE-2026-118026
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118025
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118024
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118023
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118022
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118021
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118020
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118019
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118017
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118016
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118015
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118014
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118013
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118012
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118011
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118010
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118009
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118008
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118007
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118006
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118005
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-118004
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-118003
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-118002
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-118000
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117999
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117998
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117997
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117996
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117995
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117994
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117993
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117992
Fixed
MEDIUM 6.5
Network Fixed in: 159
|
|
CVE-2026-117991
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117990
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117989
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117988
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117987
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117986
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117985
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117984
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117983
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117982
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117981
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117980
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117979
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117978
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117977
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117976
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117975
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117974
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117973
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117972
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117971
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117970
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117969
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117968
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117967
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117966
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117965
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117964
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117963
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117962
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117961
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117960
Fixed
MEDIUM 4.7
Network Fixed in: 159
|
|
CVE-2026-117959
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117958
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117957
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117956
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117955
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117954
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117953
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117952
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117951
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117950
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117949
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117948
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117947
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117946
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117945
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117944
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117943
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117942
Fixed
HIGH 7.3
Network Fixed in: 159
|
|
CVE-2026-117941
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117940
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117939
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117938
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117937
Fixed
HIGH 7.3
Network Fixed in: 159
|
|
CVE-2026-117936
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117935
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117934
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117933
Fixed
MEDIUM 5.4
Network Fixed in: 159
|
|
CVE-2026-117932
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117931
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117930
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117929
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117928
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117927
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117926
Fixed
HIGH 8.1
Network Fixed in: 159
|
|
CVE-2026-117925
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117924
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117923
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117922
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117921
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117920
Fixed
CRITICAL 9.6
Network Fixed in: 159
|
|
CVE-2026-117919
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117918
Fixed
HIGH 8.8
Network Fixed in: 159
|
|
CVE-2026-117917
Fixed
CRITICAL 9.8
Network Fixed in: 159
|
|
CVE-2026-117916
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
|
CVE-2026-117915
Fixed
HIGH 7.3
Network Fixed in: 159
|
|
CVE-2026-117914
Fixed
MEDIUM 6.3
Network Fixed in: 159
|
50
Security Score
Concerning
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs -50/-50
82 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
50
Cumulative exposure
High
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +50/+50
82 open CVEs, max CVSS 9.6, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
Thunderbird is a free email application that is easy to set up and customize - and it's loaded with great features!
Technical details
- Publisher
- Mozilla
- Distribution channel
- winget
- Identifier
- winget:Mozilla.Thunderbird
Other apps by this publisher
Apps published by Mozilla
4 apps tracked · 2 with an open CVE
FAQ
FAQ: Mozilla Thunderbird
Does Mozilla Thunderbird have known security vulnerabilities?
Mozilla Thunderbird (winget:Mozilla.Thunderbird) on Windows has 2393 CVE referenced in NVD, 82 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Which version of Mozilla Thunderbird fixes its known vulnerabilities?
Updating Mozilla Thunderbird to 160 or later closes the open CVEs that have a published fix. The current store version is 159.0.
Is Mozilla Thunderbird affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Mozilla Thunderbird (winget:Mozilla.Thunderbird) is currently in the CISA KEV catalog.
What is the latest known version of Mozilla Thunderbird?
The most recent version of Mozilla Thunderbird (winget:Mozilla.Thunderbird) tracked by Appaloosa Scout is 159.0, published by Mozilla.
Deploy this app across your fleet
Appaloosa distributes and updates your Android and iOS apps from an enterprise store.