CVE-2026-16361

Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

• CWE-119

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029734%2C2036518Broken Link
• https://www.mozilla.org/security/advisories/mfsa2026-69/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-70/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-72/Vendor Advisory

Published

Jul 21, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-16356Sandbox escape due to use-after-free in the Disability Acces…9.8
• CVE-2026-16357Incorrect boundary conditions in the Graphics component. Thi…9.8
• CVE-2026-16358Site isolation issue in the Graphics: WebRender component. T…9.8
• CVE-2026-16359Incorrect boundary conditions in the Audio/Video: GMP compon…9.1
• CVE-2026-1636A potential DLL hijacking vulnerability was reported in Leno…6.7
• CVE-2026-16360Memory safety bugs present in Firefox ESR 115.37, Firefox ES…9.8
• CVE-2026-16362Use-after-free in the WebRTC: Audio/Video component. This vu…8.8
• CVE-2026-16363JIT miscompilation in the JavaScript: WebAssembly component.…9.8
• CVE-2026-16364Incorrect boundary conditions in the Audio/Video: Playback c…9.1
• CVE-2026-16365Privilege escalation in the DOM: Workers component. This vul…8.8
• CVE-2026-16366Privilege escalation in the DOM: Navigation component. This …8.8
• CVE-2026-16367Sandbox escape due to invalid pointer in the Disability Acce…10