The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 148.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-16 advisory.

  - Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR     < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8. (CVE-2026-2769)

  - Use-after-free in the DOM: Core & HTML component. This vulnerability affects Firefox < 148 and Thunderbird     < 148. (CVE-2026-2798, CVE-2026-2799)

  - Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox <     148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.
    (CVE-2026-2757)

  - Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148, Firefox ESR <     115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8. (CVE-2026-2758)

  - Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox <     148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.
    (CVE-2026-2759)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Mozilla Thunderbird < 148.0

high Nessus Plugin ID 299889

Version 1.2

Version 1.1

Version 1.2 Feb 26, 2026, 8:51 AM CVSS metrics ("CVSSv3 score" set to 10.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2026-2769" to "CVE-2026-2790") CVSSv3 score source (changed from "CVE-2026-2798" to "CVE-2026-2778") Plugin Feed: 202602260851
Version 1.1 Feb 25, 2026, 1:08 AM New Plugin Feed: 202602250108