id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
24191	thunderbird-153.6.0esr	Joe Locash	SecurityAdvisory	"What’s Fixed:
 - Sent messages could fail to save without displaying a warning

Security fixes:
 - CVE-2026-118174: Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment (high)
 - CVE-2026-118175: Content of other messages could be included when replying to a crafted message (high)
 - CVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLs (high)
 - CVE-2026-118177: Calendar discovery accepted local file and remote network share locations (high)
 - CVE-2026-118178: RSS feed could redirect its subscription to a local file or network share (high)
 - CVE-2026-118179: Request forgery via news: links (moderate)
 - CVE-2026-118180: Matrix homeserver could redirect the chat session to a local file or network share (moderate)
 - CVE-2026-110247: Integer overflow in libmime buffer growth could lead to heap corruption (moderate)
 - CVE-2026-113869: Use-after-free in S/MIME decryption during a security device password prompt (moderate)

For the full list see:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/
"	enhancement	new	high	98-Security	BOOK	git	high