{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/thunderbird--153.5.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-113399"},{"id":"CVE-2026-113400"},{"id":"CVE-2026-113401"},{"id":"CVE-2026-113470"},{"cvss":5.9,"id":"CVE-2026-113866"},{"id":"CVE-2026-113867"},{"cvss":5.3,"id":"CVE-2026-113868"},{"cvss":5.4,"id":"CVE-2026-113869"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Firefox ESR (\u003c 115.43.1)","Firefox ESR (\u003c 153.5.1)","Firefox (\u003c 158.0.1)","Thunderbird (\u003c 153.5.1)","Thunderbird (\u003c 158.0.1)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","browser","client-side"],"_cs_type":"advisory","_cs_vendors":["Mozilla"],"content_html":"\u003cp\u003eThe French National Cybersecurity Agency (ANSSI) has published an advisory regarding multiple vulnerabilities affecting various versions of Mozilla Firefox and Thunderbird. These flaws allow for arbitrary code execution, compromise of sensitive data, and denial of service. The vulnerabilities are detailed in Mozilla security advisories MFSA 2026-111 through MFSA 2026-115.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in unauthorized arbitrary code execution, loss of data confidentiality, or application-level denial of service.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all enterprise installations of Mozilla Firefox and Thunderbird to identify versions within the affected ranges.\u003c/li\u003e\n\u003cli\u003eUpgrade Mozilla Firefox to version 158.0.1 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Mozilla Firefox ESR to version 115.43.1 or 153.5.1 or later as appropriate for the specific release track.\u003c/li\u003e\n\u003cli\u003eUpgrade Mozilla Thunderbird to version 153.5.1 or 158.0.1 or later.\u003c/li\u003e\n\u003cli\u003eReview the specific Mozilla security advisories (MFSA 2026-111 to MFSA 2026-115) for additional technical context.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T16:07:10Z","date_published":"2026-10-21T16:07:10Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mozilla-vulnerabilities/","summary":"Multiple vulnerabilities in Mozilla Firefox and Thunderbird, including CVE-2026-113399 through CVE-2026-113869, may lead to arbitrary code execution, data confidentiality compromise, or denial of service.","title":"Mozilla Firefox and Thunderbird Multiple Vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-10-mozilla-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Thunderbird (\u003c 153.5.1)","version":"https://jsonfeed.org/version/1.1"}