Mozilla Foundation Security Advisory 2026-11
Security Vulnerabilities fixed in Thunderbird 147.0.2 and 140.7.2
- Announced
- February 16, 2026
- Impact
- high
- Products
- Thunderbird
- Fixed in
-
- Thunderbird 140.7.2
- Thunderbird 147.0.2
Many of these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, however they may pose risks in browser or browser-like contexts.
#CVE-2026-2447: Heap buffer overflow in libvpx
- Reporter
- jayjayjazz
- Impact
- high