# Mozilla Thunderbird ESR.

Every CVE that names Mozilla Thunderbird ESR among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Plaintext of decrypted emails can leak through by user submitting an embedded form.](https://agentprime.io/advisories/CVE-2018-5185.md)
  `CVE-2018-5185` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Using remote content in encrypted messages can lead to the disclosure of plaintext.](https://agentprime.io/advisories/CVE-2018-5184.md)
  `CVE-2018-5184` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla developers backported selected changes in the Skia library.](https://agentprime.io/advisories/CVE-2018-5183.md)
  `CVE-2018-5183` · CVE record: Mozilla Thunderbird ESR and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird ESR: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript…](https://agentprime.io/advisories/CVE-2018-5178.md)
  `CVE-2018-5178` · CVE record: Mozilla Thunderbird ESR and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the…](https://agentprime.io/advisories/CVE-2018-5174.md)
  `CVE-2018-5174` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [It is possible to spoof the filename of an attachment and display an arbitrary attachment name.](https://agentprime.io/advisories/CVE-2018-5170.md)
  `CVE-2018-5170` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: Sites can bypass security checks on permissions to install lightweight themes by…](https://agentprime.io/advisories/CVE-2018-5168.md)
  `CVE-2018-5168` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Plaintext of decrypted emails can leak through the src attribute of remote images, or links.](https://agentprime.io/advisories/CVE-2018-5162.md)
  `CVE-2018-5162` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Crafted message headers can cause a Thunderbird process to hang on receiving the message.](https://agentprime.io/advisories/CVE-2018-5161.md)
  `CVE-2018-5161` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: An integer overflow can occur in the Skia library due to 32-bit integer use in an array…](https://agentprime.io/advisories/CVE-2018-5159.md)
  `CVE-2018-5159` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur while adjusting layout during SVG animations…](https://agentprime.io/advisories/CVE-2018-5155.md)
  `CVE-2018-5155` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur while enumerating attributes during SVG…](https://agentprime.io/advisories/CVE-2018-5154.md)
  `CVE-2018-5154` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.](https://agentprime.io/advisories/CVE-2018-5150.md)
  `CVE-2018-5150` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-thunderbird-esr>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-thunderbird-esr/>. Everything for agents: <https://agentprime.io/llms.txt>.