thunderbird-153.5.0esr

[Joe Locash]

What’s Fixed:

• Troubleshooting falsely reported crash reports were not configured when available
• Switching to Unified Folders could leave All Folders enabled and not change view
• Archived Inbox folders ignored localized names and appeared as "INBOX"
• Plain-text inline forwards omitted signatures placed below the quote

Security fixes:

• CVE-2026-110249: Denial-of-service in the Exchange email component (low)
• CVE-2026-109704: Privilege escalation in the Application Update component (high)
• CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (high)
• CVE-2026-109706: Use-after-free in the Storage: IndexedDB component (high)
• CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component (high)
• CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component (high)
• CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component (high)
• CVE-2026-109710: Use-after-free in the Graphics: Text component (high)
• CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component (high)
• CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component (high)
• CVE-2026-109713: Use-after-free in the Crash Reporting component (high)
• CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component (high)
• CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component (high)
• CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component (high)
• CVE-2026-109718: Use-after-free in the XML component (high)
• CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component (high)
• CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component (high)
• CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component (high)
• CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component (high)
• CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component (high)
• CVE-2026-109724: Use-after-free in the DOM: Core & HTML component (high)
• CVE-2026-109725: Use-after-free in the DOM: Core & HTML component (high)
• CVE-2026-109726: Use-after-free in the SVG component (high)
• CVE-2026-109727: Use-after-free in the Audio/Video component (high)
• CVE-2026-109728: Use-after-free in the DOM: Animation component (high)
• CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component (high)
• CVE-2026-109730: Integer overflow in the Graphics component (high)
• CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component (high)
• CVE-2026-109732: Use-after-free in the DOM: Streams component (high)
• CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component (high)
• CVE-2026-109734: Mitigation bypass in the DOM: Security component (moderate)
• CVE-2026-109736: Frame poisoning in the Layout component (moderate)
• CVE-2026-109737: Mitigation bypass in the Enterprise Policies component (moderate)
• CVE-2026-109738: Use-after-free in the Audio/Video: Playback component (moderate)
• CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component (moderate)
• CVE-2026-109741: Use-after-free in the Storage: Bucket File System component (moderate)
• CVE-2026-109742: Information disclosure in the PDF Viewer component (moderate)
• CVE-2026-109743: Privilege escalation in the Panning and Zooming component (moderate)
• CVE-2026-109744: Other issue in the DOM: File component (moderate)
• CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (moderate)
• CVE-2026-109782: Mitigation bypass in the File Handling component (moderate)
• CVE-2026-109751: Information disclosure in the Networking component (moderate)
• CVE-2026-109752: Use-after-free in the DOM: Workers component (moderate)
• CVE-2026-109753: Incorrect boundary conditions in the Layout component (moderate)
• CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component (moderate)
• CVE-2026-109756: Privilege escalation in the DOM: Navigation component (moderate)
• CVE-2026-109757: Sandbox escape due to race condition in the Networking component (moderate)
• CVE-2026-109759: Site isolation issue in the Networking component (moderate)
• CVE-2026-109760: Mitigation bypass in the Networking: HTTP component (moderate)
• CVE-2026-109762: Incorrect boundary conditions in the SVG component (moderate)
• CVE-2026-109763: Mitigation bypass in the File Handling component (moderate)
• CVE-2026-109764: Mitigation bypass in the Enterprise Policies component (moderate)
• CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component (moderate)
• CVE-2026-109766: Mitigation bypass in the Enterprise Policies component (moderate)
• CVE-2026-109767: Information disclosure in the Networking component (moderate)
• CVE-2026-109783: Mitigation bypass in the File Handling component (moderate)
• CVE-2026-109770: Spoofing issue in the DOM: Web Serial component (low)
• CVE-2026-109775: Denial-of-service in the WebRTC component (low)
• CVE-2026-109776: Race condition in the XPCOM component (low)
• CVE-2026-109777: Information disclosure in the Storage: IndexedDB component (low)
• CVE-2026-109778: Privilege escalation in the WebExtensions component (low)
• CVE-2026-109781: Denial-of-service in the Printing: Output component (low)

​https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/