Thunderbird 140.4 Security Update: 8 CVEs Fixed (UAF, Memory Corruption, XSS)

Critical Vulnerability Information Vulnerability Overview Announcement Date: October 14, 2025 Affected Product: Thunderbird Fixed Version: Thunderbird 140.4 Vulnerability Details CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() Reporter: Jann Niklas Hausmann Impact: High Description: A use-after-free vulnerability exists in MediaTrackGraphImpl::GetInstance(). CVE-2025-11709: Out-of-bounds Read/Write in Privileged Process via WebGL Texture Reporter: Ciskar L Impact: High Description: A malicious web process can trigger out-of-bounds read/write operations in a more privileged process by manipulating WebGL textures. CVE-2025-11710: Cross-process Information Leak via Malicious IPC Message Reporter: Ciskar L Impact: High Description: A malicious web process can use mainloop IPC messages to cause a privileged browser process to leak memory blocks to an infected process. CVE-2025-11711: Ability to Modify Certain Properties of Non-writable Objects Reporter: EnryYu Impact: High Description: It is possible to change the values of properties in JavaScript objects that are expected to be non-writable. CVE-2025-11712: OBJECT Tag Type Attribute Overrides Browser Behavior Without Content Type Reporter: Masato Kinugawa Impact: Medium Description: A malicious page can use the type attribute of the OBJECT tag to override default handlers when encountering web resources without a content type. CVE-2025-11713: Potential User-assisted Code Execution in "Copy as cURL" Command Reporter: Haifich Impact: Medium Description: Insufficient escaping in the "Copy as cURL" feature may be exploited to trick users into executing unintended code on Windows. CVE-2025-11714: Memory Safety Vulnerabilities Fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144, and Thunderbird 144 Reporter: Mozilla Fuzzing Team Impact: High Description: Memory safety vulnerabilities exist, showing evidence of memory corruption, potentially exploitable to execute arbitrary code. CVE-2025-11715: Memory Safety Vulnerabilities Fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144, and Thunderbird 144 Reporter: Mozilla Fuzzing Team Impact: High Description: Memory safety vulnerabilities exist, showing evidence of memory corruption, potentially exploitable to execute arbitrary code.

Goal Reached Thanks to every supporter — we hit 100%!

Thunderbird 140.4 Security Update: 8 CVEs Fixed (UAF, Memory Corruption, XSS)