Critical Vulnerabilities Discovered in Mozilla Thunderbird Allowing Remote Code Execution and DoS Attacks

Multiple vulnerabilities were discovered in Mozilla Thunderbird on 23 July 2026, as reported by CERT-FR. These flaws enable attackers to execute arbitrary remote code, achieve privilege escalation, and trigger remote denial-of-service (DoS) conditions. The affected software is Mozilla Thunderbird, though no specific versions or CVE identifiers were provided in the notice. The impacts include unauthorized code execution, unauthorized system access, and service disruption. No additional technical details, such as exploitation vectors or mitigation steps, were disclosed in the advisory.