Wingetlywingetly
← All apps

Mozilla Thunderbird ESR (ar)

by Mozillav153.2.0

Last updated

The official annual extended support release of Thunderbird intended for users who want all available new features on an annual basis and stability/security fixes on a monthly basis.

Visit homepage

Install with winget

$ winget install --id Mozilla.Thunderbird.ESR.ar --exact --version 153.2.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Mozilla Thunderbird ESR (ar)

Mozilla Thunderbird ESR (ar) uses EXE (NSIS). The silent install switches are /S /PreventRebootRequired=true.

One-line silent install (x64, machine scope)
Thunderbird%20Setup%20153.2.0esr.exe /S /PreventRebootRequired=true

See the full silent install reference for Mozilla Thunderbird ESR (ar) →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Thunderbird is a free and open source email, newsfeed, chat, and calendaring client, that’s easy to set up and customize. One of the core principles of Thunderbird is the use and promotion of open standards - this focus is a rejection of our world of closed platforms and services that can’t communicate with each other. We want our users to have freedom and choice in how they communicate.

This is the official annual extended support release. Thie release is intended for users who want all available new features on an annual basis and stability/security fixes on a monthly basis.

Installers · v153.2.0

ArchitectureTypeScopeInstallDownload
x86EXE
NSIS
machineDirect
x64EXE
NSIS
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • high7.5Patched in wingetCVE-2026-84642affects before 153.2.0, 155.0Sep 1, 2026

    The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fix...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-84641affects before 140.15.0, 153.2.0, 155.0Sep 1, 2026

    A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-84640affects before 140.15.0, 153.2.0, 155.0Sep 1, 2026

    A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    Vendor advisory
  • critical9.1Patched in wingetCVE-2026-84639affects before 140.15.0, 153.2.0, 155.0Sep 1, 2026

    Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    Vendor advisory
  • critical9.8Patched in wingetCVE-2026-84637affects before 153.2.0, 155.0Sep 1, 2026

    Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-84145affects before 140.15.0, 153.2.0, 155.0Sep 1, 2026

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vu...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-84144affects before 153.2.0, 155.0Sep 1, 2026

    Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in...

    Vendor advisory
  • critical9.8Patched in wingetCVE-2026-84143affects before 140.15.0, 153.2.0, 155.0Sep 1, 2026

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vu...

    Vendor advisory
Showing 8 of 25. Source: NVD, updated just now. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • Mozilla Firefox (dsb)Mozilla
    Mozilla.Firefox.dsbv155.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (en-US)Mozilla
    Mozilla.Firefoxv155.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (gd)Mozilla
    Mozilla.Firefox.gdv155.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • I
    IceCatMozilla
    Icecat.Icecatv115.24.0

    The GNU version of the Firefox browser

  • Mozilla Firefox (id)Mozilla
    Mozilla.Firefox.idv155.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (MSIX)Mozilla
    Mozilla.Firefox.MSIXv155.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

More from Mozilla or browse email, mail.

Frequently asked questions

How do I install Mozilla Thunderbird ESR (ar) on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Mozilla.Thunderbird.ESR.ar --exact --version 153.2.0. winget downloads the installer from Mozilla and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Mozilla Thunderbird ESR (ar) silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id Mozilla.Thunderbird.ESR.ar --exact 153.2.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Mozilla Thunderbird ESR (ar)?
Mozilla Thunderbird ESR (ar) uses EXE (NSIS). Run the downloaded installer with: Thunderbird%20Setup%20153.2.0esr.exe /S /PreventRebootRequired=true. The silent switches are /S /PreventRebootRequired=true.
How do I uninstall Mozilla Thunderbird ESR (ar) via winget?
Run: winget uninstall --id Mozilla.Thunderbird.ESR.ar --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Mozilla Thunderbird ESR (ar)'s Apps & Features entry.
Is Mozilla Thunderbird ESR (ar) free?
Mozilla Thunderbird ESR (ar) is distributed under MPL-2.0. Refer to the publisher (https://www.thunderbird.net/) for the full license terms - Wingetly itself does not charge for installation.
Does Mozilla Thunderbird ESR (ar) work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Mozilla Thunderbird ESR (ar) directly from the publisher.
How do I keep Mozilla Thunderbird ESR (ar) up to date?
Run winget upgrade --id Mozilla.Thunderbird.ESR.ar --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Mozilla Thunderbird ESR (ar) from microsoft/winget-pkgs.

Recent versions

  • 153.2.0latest
  • 153.1.1
  • 153.1.0
  • 153.0.3
  • 153.0.2
  • 153.0.1
  • 140.12.1
  • 140.12.0
  • 140.11.1
  • 140.11.0