Wingetlywingetly
← All apps

Mozilla Thunderbird ESR (de)

by Mozillav153.5.1

Last updated

The official annual extended support release of Thunderbird intended for users who want all available new features on an annual basis and stability/security fixes on a monthly basis.

Visit homepage

Install with winget

$ winget install --id Mozilla.Thunderbird.ESR.de --exact --version 153.5.1

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Mozilla Thunderbird ESR (de)

Mozilla Thunderbird ESR (de) uses EXE (NSIS). The silent install switches are /S /PreventRebootRequired=true.

One-line silent install (x64, machine scope)
Thunderbird%20Setup%20153.5.1esr.exe /S /PreventRebootRequired=true

See the full silent install reference for Mozilla Thunderbird ESR (de) →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

From $49/month. No credit card required.

Not on Intune? Pckgr RMM deploys and patches apps like this one on any Windows fleet. Free for up to 5 devices.

About

Thunderbird is a free and open source email, newsfeed, chat, and calendaring client, that’s easy to set up and customize. One of the core principles of Thunderbird is the use and promotion of open standards - this focus is a rejection of our world of closed platforms and services that can’t communicate with each other. We want our users to have freedom and choice in how they communicate.

This is the official annual extended support release. Thie release is intended for users who want all available new features on an annual basis and stability/security fixes on a monthly basis.

Installers · v153.5.1

ArchitectureTypeScopeInstallDownload
x86EXE
NSIS
machineDirect
x64EXE
NSIS
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium4.3Patched in wingetCVE-2026-96869affects before 140.17.0, 153.4.0, 157.0Sep 29, 2026

    Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-100832affects before 140.17.0, 153.4.0Sep 29, 2026

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-100820affects before 140.17.0, 153.4.0, 157.0Sep 29, 2026

    Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Vendor advisory
  • critical9.6Patched in wingetCVE-2026-100819affects before 140.17.0, 153.4.0, 157.0Sep 29, 2026

    Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Vendor advisory
  • critical9.6Patched in wingetCVE-2026-100818affects before 140.17.0, 153.4.0, 157.0Sep 29, 2026

    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Vendor advisory
  • medium5.4Fix in v157.0CVE-2026-100817affects before 157.0Sep 29, 2026

    Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

    Vendor advisory
  • high8.1Patched in wingetCVE-2026-100816affects before 153.4.0, 157.0Sep 29, 2026

    Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-100815affects before 153.4.0, 157.0Sep 29, 2026

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 2h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Not on Intune? Patch it with Pckgr RMM, free for up to 5 devices.

Related apps

  • Mozilla Firefox (en-US)Mozilla
    Mozilla.Firefoxv157.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (dsb)Mozilla
    Mozilla.Firefox.dsbv157.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • I
    IceCatMozilla
    Icecat.Icecatv115.24.0

    The GNU version of the Firefox browser

  • Mozilla Firefox (gd)Mozilla
    Mozilla.Firefox.gdv157.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (MSIX)Mozilla
    Mozilla.Firefox.MSIXv158.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

  • Mozilla Firefox (id)Mozilla
    Mozilla.Firefox.idv157.0.1

    Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

More from Mozilla or browse email, mail.

Frequently asked questions

How do I install Mozilla Thunderbird ESR (de) on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Mozilla.Thunderbird.ESR.de --exact --version 153.5.1. winget downloads the installer from Mozilla and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Mozilla Thunderbird ESR (de) silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id Mozilla.Thunderbird.ESR.de --exact 153.5.1 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Mozilla Thunderbird ESR (de)?
Mozilla Thunderbird ESR (de) uses EXE (NSIS). Run the downloaded installer with: Thunderbird%20Setup%20153.5.1esr.exe /S /PreventRebootRequired=true. The silent switches are /S /PreventRebootRequired=true.
How do I uninstall Mozilla Thunderbird ESR (de) via winget?
Run: winget uninstall --id Mozilla.Thunderbird.ESR.de --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Mozilla Thunderbird ESR (de)'s Apps & Features entry.
Is Mozilla Thunderbird ESR (de) free?
Mozilla Thunderbird ESR (de) is distributed under MPL-2.0. Refer to the publisher (https://www.thunderbird.net/) for the full license terms - Wingetly itself does not charge for installation.
Does Mozilla Thunderbird ESR (de) work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Mozilla Thunderbird ESR (de) directly from the publisher.
How do I keep Mozilla Thunderbird ESR (de) up to date?
Run winget upgrade --id Mozilla.Thunderbird.ESR.de --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Mozilla Thunderbird ESR (de) from microsoft/winget-pkgs.

Recent versions

  • 153.5.1latest
  • 153.5.0
  • 153.4.0
  • 153.3.1
  • 153.3.0
  • 153.2.0
  • 153.1.1
  • 153.1.0
  • 153.0.3
  • 153.0.2