Mozilla Thunderbird 140.10.1 Security Advisory: Sandbox Escape and Memory Safety Fixes

Mozilla Foundation Security Advisory 2026-39 Vulnerability Overview Mozilla has fixed multiple security vulnerabilities in Thunderbird version 140.10.1, including information disclosure, sandbox escape, and memory safety issues. Affected Scope Product: Thunderbird Version: Thunderbird 140.10.1 Severity: High Note: In Thunderbird, these defects cannot be exploited via email if script execution is disabled when reading messages; however, risks may exist in the browser or similar contexts. Remediation Upgrade to Thunderbird 140.10.1. Detailed Vulnerability List 1. CVE-2026-7320: Information Disclosure Description: Information disclosure in the Audio/Video component due to incorrect boundary conditions. Reporter: Xuehao Guo Impact: High References: Bug 2027433 2. CVE-2026-7321: Sandbox Escape Description: Sandbox escape in the WebRTC: Networking component due to incorrect boundary conditions. Reporter: The Mozilla Fuzzing Team Impact: Moderate References: Bug 2029401 3. CVE-2026-7322: Memory Safety Vulnerability Description: Memory safety vulnerabilities exist in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some vulnerabilities show signs of memory corruption and, with sufficient effort, could potentially be exploited to execute arbitrary code. Reporter: C.M.Chang, Christian Holler, Steve Fink, and The Mozilla Fuzzing Team Impact: Critical References: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 4. CVE-2026-7323: Memory Safety Vulnerability Description: Memory safety vulnerabilities exist in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some vulnerabilities show signs of memory corruption and, with sufficient effort, could potentially be exploited to execute arbitrary code. Reporter: Ryan Hunt, Steve Fink, and The Mozilla Fuzzing Team Impact: High References**: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Goal Reached Thanks to every supporter — we hit 100%!

Mozilla Thunderbird 140.10.1 Security Advisory: Sandbox Escape and Memory Safety Fixes

More from this source