{
  "fix": "thunderbird 1:140.7.1\u002Bbuild1-0ubuntu0.22.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-thunderbird-1-140.7.1-build1-0ubuntu0.22.04.1",
  "summary": "thunderbird 1:140.7.1\u002Bbuild1-0ubuntu0.22.04.1, released January 28, 2026, fixes 112 CVEs in thunderbird. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "package",
  "title": "thunderbird 1:140.7.1\u002Bbuild1-0ubuntu0.22.04.1 for Ubuntu 22.04.1 LTS (jammy)",
  "released": "2026-01-28T16:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-8028, rated Critical",
  "supported": true,
  "cveCount": 112,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.10695,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "thunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/thunderbird",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:140.7.1\u002Bbuild1-0ubuntu0.22.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-8028",
      "url": "https://patchblox.com/security/cve/CVE-2025-8028",
      "title": "Large branch table could lead to truncated instruction",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0058,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8031",
      "url": "https://patchblox.com/security/cve/CVE-2025-8031",
      "title": "Incorrect URL stripping in CSP reports",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8034",
      "url": "https://patchblox.com/security/cve/CVE-2025-8034",
      "title": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8027",
      "url": "https://patchblox.com/security/cve/CVE-2025-8027",
      "title": "JavaScript engine only wrote partial return value to stack",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 7.5,
      "epss": 0.00432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8033",
      "url": "https://patchblox.com/security/cve/CVE-2025-8033",
      "title": "Incorrect JavaScript state machine for generators",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 7.5,
      "epss": 0.00432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0247",
      "url": "https://patchblox.com/security/cve/CVE-2025-0247",
      "title": "Memory safety bugs fixed in Firefox 134 and Thunderbird 134",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.10695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6436",
      "url": "https://patchblox.com/security/cve/CVE-2025-6436",
      "title": "Memory safety bugs fixed in Firefox 140 and Thunderbird 140",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.04256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10466",
      "url": "https://patchblox.com/security/cve/CVE-2024-10466",
      "title": "Mozilla Firefox ESR and 7 others: Uncontrolled Resource Consumption",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.5,
      "epss": 0.0081,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10533",
      "url": "https://patchblox.com/security/cve/CVE-2025-10533",
      "title": "Integer overflow in the SVG component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0241",
      "url": "https://patchblox.com/security/cve/CVE-2025-0241",
      "title": "Memory corruption when using JavaScript Text Segmentation",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.7,
      "epss": 0.00734,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9179",
      "url": "https://patchblox.com/security/cve/CVE-2025-9179",
      "title": "Sandbox escape due to invalid pointer in the Audio/Video: GMP component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5283",
      "url": "https://patchblox.com/security/cve/CVE-2025-5283",
      "title": "Chromium: CVE-2025-5283 Use after free in libvpx",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14321",
      "url": "https://patchblox.com/security/cve/CVE-2025-14321",
      "title": "Use-after-free in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10467",
      "url": "https://patchblox.com/security/cve/CVE-2024-10467",
      "title": "Mozilla Firefox ESR and 7 others: Out-of-bounds Read",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.8,
      "epss": 0.00632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9402",
      "url": "https://patchblox.com/security/cve/CVE-2024-9402",
      "title": "Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14324",
      "url": "https://patchblox.com/security/cve/CVE-2025-14324",
      "title": "JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9396",
      "url": "https://patchblox.com/security/cve/CVE-2024-9396",
      "title": "Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00587,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0880",
      "url": "https://patchblox.com/security/cve/CVE-2026-0880",
      "title": "Sandbox escape due to integer overflow in the Graphics component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14330",
      "url": "https://patchblox.com/security/cve/CVE-2025-14330",
      "title": "JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00542,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-1020",
      "url": "https://patchblox.com/security/cve/CVE-2025-1020",
      "title": "Memory safety bugs fixed in Firefox 135 and Thunderbird 135",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9185",
      "url": "https://patchblox.com/security/cve/CVE-2025-9185",
      "title": "Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.0054,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11708",
      "url": "https://patchblox.com/security/cve/CVE-2025-11708",
      "title": "Use-after-free in MediaTrackGraphImpl::GetInstance()",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00509,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9400",
      "url": "https://patchblox.com/security/cve/CVE-2024-9400",
      "title": "Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0879",
      "url": "https://patchblox.com/security/cve/CVE-2026-0879",
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9399",
      "url": "https://patchblox.com/security/cve/CVE-2024-9399",
      "title": "Mozilla Firefox ESR and 7 others: Improper Resource Shutdown or Release",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00495,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-1942",
      "url": "https://patchblox.com/security/cve/CVE-2025-1942",
      "title": "Disclosure of uninitialized memory when .toUpperCase() causes string to get longer",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00483,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-3034",
      "url": "https://patchblox.com/security/cve/CVE-2025-3034",
      "title": "Memory safety bugs fixed in Firefox 137 and Thunderbird 137",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0891",
      "url": "https://patchblox.com/security/cve/CVE-2026-0891",
      "title": "Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00475,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14333",
      "url": "https://patchblox.com/security/cve/CVE-2025-14333",
      "title": "Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00473,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0877",
      "url": "https://patchblox.com/security/cve/CVE-2026-0877",
      "title": "Mitigation bypass in the DOM: Security component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00473,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0878",
      "url": "https://patchblox.com/security/cve/CVE-2026-0878",
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0882",
      "url": "https://patchblox.com/security/cve/CVE-2026-0882",
      "title": "Use-after-free in the IPC component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0884",
      "url": "https://patchblox.com/security/cve/CVE-2026-0884",
      "title": "Use-after-free in the JavaScript Engine component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6435",
      "url": "https://patchblox.com/security/cve/CVE-2025-6435",
      "title": "Save as in Devtools could download files without sanitizing the extension",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9403",
      "url": "https://patchblox.com/security/cve/CVE-2024-9403",
      "title": "Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8036",
      "url": "https://patchblox.com/security/cve/CVE-2025-8036",
      "title": "DNS rebinding circumvents CORS",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00446,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14323",
      "url": "https://patchblox.com/security/cve/CVE-2025-14323",
      "title": "Privilege escalation in the DOM: Notifications component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00445,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-1943",
      "url": "https://patchblox.com/security/cve/CVE-2025-1943",
      "title": "Memory safety bugs fixed in Firefox 136 and Thunderbird 136",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.2,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9182",
      "url": "https://patchblox.com/security/cve/CVE-2025-9182",
      "title": "Denial-of-service due to out-of-memory in the Graphics: WebRender component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00436,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14328",
      "url": "https://patchblox.com/security/cve/CVE-2025-14328",
      "title": "Privilege escalation in the Netmonitor component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14329",
      "url": "https://patchblox.com/security/cve/CVE-2025-14329",
      "title": "Privilege escalation in the Netmonitor component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11709",
      "url": "https://patchblox.com/security/cve/CVE-2025-11709",
      "title": "Out of bounds read/write in a privileged process triggered by WebGL textures",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11710",
      "url": "https://patchblox.com/security/cve/CVE-2025-11710",
      "title": "Cross-process information leaked due to malicious IPC messages",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9184",
      "url": "https://patchblox.com/security/cve/CVE-2025-9184",
      "title": "Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9181",
      "url": "https://patchblox.com/security/cve/CVE-2025-9181",
      "title": "Uninitialized memory in the JavaScript Engine component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13016",
      "url": "https://patchblox.com/security/cve/CVE-2025-13016",
      "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14327",
      "url": "https://patchblox.com/security/cve/CVE-2025-14327",
      "title": "Spoofing issue in the Downloads Panel component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-3032",
      "url": "https://patchblox.com/security/cve/CVE-2025-3032",
      "title": "Leaking file descriptors from the fork server",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.4,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0885",
      "url": "https://patchblox.com/security/cve/CVE-2026-0885",
      "title": "Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8035",
      "url": "https://patchblox.com/security/cve/CVE-2025-8035",
      "title": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00401,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0886",
      "url": "https://patchblox.com/security/cve/CVE-2026-0886",
      "title": "Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8029",
      "url": "https://patchblox.com/security/cve/CVE-2025-8029",
      "title": "javascript: URLs executed on object and embed tags",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8030",
      "url": "https://patchblox.com/security/cve/CVE-2025-8030",
      "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8032",
      "url": "https://patchblox.com/security/cve/CVE-2025-8032",
      "title": "XSLT documents could bypass CSP",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10528",
      "url": "https://patchblox.com/security/cve/CVE-2025-10528",
      "title": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6427",
      "url": "https://patchblox.com/security/cve/CVE-2025-6427",
      "title": "connect-src Content Security Policy restriction could be bypassed",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8040",
      "url": "https://patchblox.com/security/cve/CVE-2025-8040",
      "title": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14325",
      "url": "https://patchblox.com/security/cve/CVE-2025-14325",
      "title": "JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00367,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14322",
      "url": "https://patchblox.com/security/cve/CVE-2025-14322",
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8,
      "epss": 0.00363,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0883",
      "url": "https://patchblox.com/security/cve/CVE-2026-0883",
      "title": "Information disclosure in the Networking component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6432",
      "url": "https://patchblox.com/security/cve/CVE-2025-6432",
      "title": "DNS Requests leaked outside of a configured SOCKS proxy",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.6,
      "epss": 0.0035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5272",
      "url": "https://patchblox.com/security/cve/CVE-2025-5272",
      "title": "Memory safety bugs fixed in Firefox 139 and Thunderbird 139",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.3,
      "epss": 0.00343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8039",
      "url": "https://patchblox.com/security/cve/CVE-2025-8039",
      "title": "Search terms persisted in URL bar",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10537",
      "url": "https://patchblox.com/security/cve/CVE-2025-10537",
      "title": "Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11714",
      "url": "https://patchblox.com/security/cve/CVE-2025-11714",
      "title": "Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0887",
      "url": "https://patchblox.com/security/cve/CVE-2026-0887",
      "title": "Clickjacking issue, information disclosure in the PDF Viewer component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00326,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11715",
      "url": "https://patchblox.com/security/cve/CVE-2025-11715",
      "title": "Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10532",
      "url": "https://patchblox.com/security/cve/CVE-2025-10532",
      "title": "Incorrect boundary conditions in the JavaScript: GC component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13014",
      "url": "https://patchblox.com/security/cve/CVE-2025-13014",
      "title": "Use-after-free in the Audio/Video component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10529",
      "url": "https://patchblox.com/security/cve/CVE-2025-10529",
      "title": "Same-origin policy bypass in the Layout component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-4085",
      "url": "https://patchblox.com/security/cve/CVE-2025-4085",
      "title": "Potential information leakage and privilege escalation in UITour actor",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.1,
      "epss": 0.00308,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13020",
      "url": "https://patchblox.com/security/cve/CVE-2025-13020",
      "title": "Use-after-free in the WebRTC: Audio/Video component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0890",
      "url": "https://patchblox.com/security/cve/CVE-2026-0890",
      "title": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6433",
      "url": "https://patchblox.com/security/cve/CVE-2025-6433",
      "title": "WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10527",
      "url": "https://patchblox.com/security/cve/CVE-2025-10527",
      "title": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5270",
      "url": "https://patchblox.com/security/cve/CVE-2025-5270",
      "title": "SNI was sometimes unencrypted",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11713",
      "url": "https://patchblox.com/security/cve/CVE-2025-11713",
      "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9180",
      "url": "https://patchblox.com/security/cve/CVE-2025-9180",
      "title": "Same-origin policy bypass in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13017",
      "url": "https://patchblox.com/security/cve/CVE-2025-13017",
      "title": "Same-origin policy bypass in the DOM: Notifications component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13018",
      "url": "https://patchblox.com/security/cve/CVE-2025-13018",
      "title": "Mitigation bypass in the DOM: Security component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13019",
      "url": "https://patchblox.com/security/cve/CVE-2025-13019",
      "title": "Same-origin policy bypass in the DOM: Workers component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8038",
      "url": "https://patchblox.com/security/cve/CVE-2025-8038",
      "title": "CSP frame-src was not correctly enforced for paths",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8037",
      "url": "https://patchblox.com/security/cve/CVE-2025-8037",
      "title": "Nameless cookies shadow secure cookies",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.1,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0243",
      "url": "https://patchblox.com/security/cve/CVE-2025-0243",
      "title": "Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13012",
      "url": "https://patchblox.com/security/cve/CVE-2025-13012",
      "title": "Race condition in the Graphics component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11711",
      "url": "https://patchblox.com/security/cve/CVE-2025-11711",
      "title": "Some non-writable Object properties could be modified",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13015",
      "url": "https://patchblox.com/security/cve/CVE-2025-13015",
      "title": "Spoofing issue in Firefox",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-11712",
      "url": "https://patchblox.com/security/cve/CVE-2025-11712",
      "title": "An OBJECT tag type attribute overrode browser behavior on web resources without a content-type",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-13013",
      "url": "https://patchblox.com/security/cve/CVE-2025-13013",
      "title": "Mitigation bypass in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14331",
      "url": "https://patchblox.com/security/cve/CVE-2025-14331",
      "title": "Same-origin policy bypass in the Request Handling component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10536",
      "url": "https://patchblox.com/security/cve/CVE-2025-10536",
      "title": "Information disclosure in the Networking: Cache component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-50336",
      "url": "https://patchblox.com/security/cve/CVE-2024-50336",
      "title": "MozillaThunderbird: Fixed insufficient MXC URI validation which could allow client-side path traversal (bsc#1234413)",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0240",
      "url": "https://patchblox.com/security/cve/CVE-2025-0240",
      "title": "Compartment mismatch when parsing JavaScript JSON module",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00673,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10464",
      "url": "https://patchblox.com/security/cve/CVE-2024-10464",
      "title": "Mozilla Firefox ESR and 7 others: Out-of-bounds Read",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.00637,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10461",
      "url": "https://patchblox.com/security/cve/CVE-2024-10461",
      "title": "Mozilla Firefox ESR and 7 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00599,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0237",
      "url": "https://patchblox.com/security/cve/CVE-2025-0237",
      "title": "WebChannel APIs susceptible to confused deputy attack",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.8,
      "epss": 0.00598,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9398",
      "url": "https://patchblox.com/security/cve/CVE-2024-9398",
      "title": "Mozilla Firefox ESR and 7 others: Observable Discrepancy",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10462",
      "url": "https://patchblox.com/security/cve/CVE-2024-10462",
      "title": "Mozilla Firefox ESR and 7 others: Authentication Bypass by Spoofing",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.00565,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10465",
      "url": "https://patchblox.com/security/cve/CVE-2024-10465",
      "title": "Mozilla Firefox ESR and 7 others: Authentication Bypass by Spoofing",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.00565,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10468",
      "url": "https://patchblox.com/security/cve/CVE-2024-10468",
      "title": "Mozilla Firefox ESR and 7 others: Allocation of Resources Without Limits or Throttling",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-1018",
      "url": "https://patchblox.com/security/cve/CVE-2025-1018",
      "title": "Fullscreen notification is not displayed when fullscreen is re-requested",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00407,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9397",
      "url": "https://patchblox.com/security/cve/CVE-2024-9397",
      "title": "Mozilla Firefox ESR and 7 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00373,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-1019",
      "url": "https://patchblox.com/security/cve/CVE-2025-1019",
      "title": "Fullscreen notification not properly displayed",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00357,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10460",
      "url": "https://patchblox.com/security/cve/CVE-2024-10460",
      "title": "Mozilla Firefox ESR and 7 others: Origin Validation Error",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-4092",
      "url": "https://patchblox.com/security/cve/CVE-2025-4092",
      "title": "Memory safety bugs fixed in Firefox 138 and Thunderbird 138",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5271",
      "url": "https://patchblox.com/security/cve/CVE-2025-5271",
      "title": "Devtools\u0027 preview ignored CSP headers",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00307,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-3031",
      "url": "https://patchblox.com/security/cve/CVE-2025-3031",
      "title": "JIT optimization bug with different stack slot sizes",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6434",
      "url": "https://patchblox.com/security/cve/CVE-2025-6434",
      "title": "HTTPS-Only exception screen lacked anti-clickjacking delay",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-0239",
      "url": "https://patchblox.com/security/cve/CVE-2025-0239",
      "title": "Alt-Svc ALPN validation failure when redirected",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.4,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-4089",
      "url": "https://patchblox.com/security/cve/CVE-2025-4089",
      "title": "Potential local code execution in \u0022copy as cURL\u0022 command",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.1,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-4088",
      "url": "https://patchblox.com/security/cve/CVE-2025-4088",
      "title": "Cross-site request forgery via storage access API redirects",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-0818",
      "url": "https://patchblox.com/security/cve/CVE-2026-0818",
      "title": "CSS-based exfiltration of the content from partially encrypted emails when allowing remote content",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-14T14:09:31Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}