Linux · Ubuntu · Package update · January 28, 2026

thunderbird 1:140.7.1+build1-0ubuntu0.22.04.1: thunderbird 1:140.7.1+build1-0ubuntu0.22.04.1 for Ubuntu 22.04.1 LTS (jammy)

thunderbird 1:140.7.1+build1-0ubuntu0.22.04.1, released January 28, 2026, fixes 112 CVEs in thunderbird. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
112
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1070
95th percentile

Priority of the 112 CVEs

Patch now 0 Urgent 5 High 86 Routine 21

Fixed package versions

ProductReleaseFixed in
thunderbirdUbuntu 22.04.1 LTS (jammy)1:140.7.1+build1-0ubuntu0.22.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-8028 Large branch table could lead to truncated instruction9.8 0.0058 None reported
Urgent CVE-2025-8031 Incorrect URL stripping in CSP reports9.8 0.0051 None reported
Urgent CVE-2025-8034 Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 0.0046 None reported
Urgent CVE-2025-8027 JavaScript engine only wrote partial return value to stack7.5 0.0043 None reported
Urgent CVE-2025-8033 Incorrect JavaScript state machine for generators7.5 0.0043 None reported
High CVE-2025-0247 Memory safety bugs fixed in Firefox 134 and Thunderbird 1349.8 0.1070 None reported
High CVE-2025-6436 Memory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 0.0426 None reported
High CVE-2024-10466 Mozilla Firefox ESR and 7 others: Uncontrolled Resource Consumption7.5 0.0081 None reported
High CVE-2025-10533 Integer overflow in the SVG component8.8 0.0077 None reported
High CVE-2025-0241 Memory corruption when using JavaScript Text Segmentation7.7 0.0073 None reported
High CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 0.0065 None reported
High CVE-2025-5283 Chromium: CVE-2025-5283 Use after free in libvpx8.8 0.0064 None reported
High CVE-2025-14321 Use-after-free in the WebRTC: Signaling component9.8 0.0064 None reported
High CVE-2024-10467 Mozilla Firefox ESR and 7 others: Out-of-bounds Read8.8 0.0063 None reported
High CVE-2024-9402 Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 0.0062 None reported
High CVE-2025-14324 JIT miscompilation in the JavaScript Engine: JIT component9.8 0.0061 None reported
High CVE-2024-9396 Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 0.0059 None reported
High CVE-2026-0880 Sandbox escape due to integer overflow in the Graphics component8.8 0.0054 None reported
High CVE-2025-14330 JIT miscompilation in the JavaScript Engine: JIT component9.8 0.0054 None reported
High CVE-2025-1020 Memory safety bugs fixed in Firefox 135 and Thunderbird 1359.8 0.0054 None reported
High CVE-2025-9185 Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 0.0054 None reported
High CVE-2025-11708 Use-after-free in MediaTrackGraphImpl::GetInstance()9.8 0.0051 None reported
High CVE-2024-9400 Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 0.0051 None reported
High CVE-2026-0879 Sandbox escape due to incorrect boundary conditions in the Graphics component9.8 0.0050 None reported
High CVE-2024-9399 Mozilla Firefox ESR and 7 others: Improper Resource Shutdown or Release7.5 0.0050 None reported
Showing 1 to 25 of 112 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.