vulnerability

MFSA2025-78 Thunderbird: Security Vulnerabilities fixed in Thunderbird 140.3 (CVE-2025-10527)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Sep 16, 2025

Added

Sep 17, 2025

Modified

Jul 1, 2026

Description

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

Solution

mozilla-thunderbird-upgrade-140_3

References

CVE-2025-10527
https://attackerkb.com/topics/CVE-2025-10527
CWE-416
EUVD-EUVD-2025-29562
http://www.mozilla.org/security/announce/2025/mfsa2025-78.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29562

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report