# Mozilla Thunderbird. Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Using remote content in encrypted messages can lead to the disclosure of plaintext.](https://agentprime.io/advisories/CVE-2018-5184.md) `CVE-2018-5184` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla developers backported selected changes in the Skia library.](https://agentprime.io/advisories/CVE-2018-5183.md) `CVE-2018-5183` · CVE record: Mozilla Thunderbird ESR and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird ESR: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript…](https://agentprime.io/advisories/CVE-2018-5178.md) `CVE-2018-5178` · CVE record: Mozilla Thunderbird ESR and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the…](https://agentprime.io/advisories/CVE-2018-5174.md) `CVE-2018-5174` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [It is possible to spoof the filename of an attachment and display an arbitrary attachment name.](https://agentprime.io/advisories/CVE-2018-5170.md) `CVE-2018-5170` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: Sites can bypass security checks on permissions to install lightweight themes by…](https://agentprime.io/advisories/CVE-2018-5168.md) `CVE-2018-5168` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Plaintext of decrypted emails can leak through the src attribute of remote images, or links.](https://agentprime.io/advisories/CVE-2018-5162.md) `CVE-2018-5162` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Crafted message headers can cause a Thunderbird process to hang on receiving the message.](https://agentprime.io/advisories/CVE-2018-5161.md) `CVE-2018-5161` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: An integer overflow can occur in the Skia library due to 32-bit integer use in an array…](https://agentprime.io/advisories/CVE-2018-5159.md) `CVE-2018-5159` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur while adjusting layout during SVG animations…](https://agentprime.io/advisories/CVE-2018-5155.md) `CVE-2018-5155` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur while enumerating attributes during SVG…](https://agentprime.io/advisories/CVE-2018-5154.md) `CVE-2018-5154` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.](https://agentprime.io/advisories/CVE-2018-5150.md) `CVE-2018-5150` · CVE record: Mozilla Thunderbird and 3 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: An out of bounds memory write while processing Vorbis audio data was reported through the…](https://agentprime.io/advisories/CVE-2018-5146.md) `CVE-2018-5146` · CVE record: Mozilla Firefox and 2 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox ESR 52.6.](https://agentprime.io/advisories/CVE-2018-5145.md) `CVE-2018-5145` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox ESR: An integer overflow can occur during conversion of text to some Unicode character sets…](https://agentprime.io/advisories/CVE-2018-5144.md) `CVE-2018-5144` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A lack of parameter validation on IPC messages results in a potential out-of-bounds write…](https://agentprime.io/advisories/CVE-2018-5129.md) `CVE-2018-5129` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.](https://agentprime.io/advisories/CVE-2018-5127.md) `CVE-2018-5127` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.](https://agentprime.io/advisories/CVE-2018-5125.md) `CVE-2018-5125` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: If right-to-left text is used in the addressbar with left-to-right alignment…](https://agentprime.io/advisories/CVE-2018-5117.md) `CVE-2018-5117` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur during font face manipulation when a font face…](https://agentprime.io/advisories/CVE-2018-5104.md) `CVE-2018-5104` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur during mouse event handling due to issues with…](https://agentprime.io/advisories/CVE-2018-5103.md) `CVE-2018-5103` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating HTML media elements with media…](https://agentprime.io/advisories/CVE-2018-5102.md) `CVE-2018-5102` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when the widget listener is holding strong…](https://agentprime.io/advisories/CVE-2018-5099.md) `CVE-2018-5099` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when form input elements, focus…](https://agentprime.io/advisories/CVE-2018-5098.md) `CVE-2018-5098` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur during XSL transformations when the source…](https://agentprime.io/advisories/CVE-2018-5097.md) `CVE-2018-5097` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox ESR: A use-after-free vulnerability can occur while editing events in form elements on a page…](https://agentprime.io/advisories/CVE-2018-5096.md) `CVE-2018-5096` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: An integer overflow vulnerability in the Skia library when allocating memory for edge…](https://agentprime.io/advisories/CVE-2018-5095.md) `CVE-2018-5095` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.](https://agentprime.io/advisories/CVE-2018-5089.md) `CVE-2018-5089` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [RSS fields can inject new lines into the created email structure, modifying the message body.](https://agentprime.io/advisories/CVE-2017-7848.md) `CVE-2017-7848` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.](https://agentprime.io/advisories/CVE-2017-7847.md) `CVE-2017-7847` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a…](https://agentprime.io/advisories/CVE-2017-7846.md) `CVE-2017-7846` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the…](https://agentprime.io/advisories/CVE-2017-7845.md) `CVE-2017-7845` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [The Resource Timing API incorrectly revealed navigations in cross-origin iframes.](https://agentprime.io/advisories/CVE-2017-7830.md) `CVE-2017-7830` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: It is possible to spoof the sender's email address and display an arbitrary sender…](https://agentprime.io/advisories/CVE-2017-7829.md) `CVE-2017-7829` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur when flushing and resizing layout because the…](https://agentprime.io/advisories/CVE-2017-7828.md) `CVE-2017-7828` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.](https://agentprime.io/advisories/CVE-2017-7826.md) `CVE-2017-7826` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Several fonts on OS X display some Tibetan and Arabic characters as whitespace.](https://agentprime.io/advisories/CVE-2017-7825.md) `CVE-2017-7825` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…](https://agentprime.io/advisories/CVE-2017-7824.md) `CVE-2017-7824` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: The content security policy (CSP) "sandbox" directive did not create a unique origin for…](https://agentprime.io/advisories/CVE-2017-7823.md) `CVE-2017-7823` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if…](https://agentprime.io/advisories/CVE-2017-7819.md) `CVE-2017-7819` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich…](https://agentprime.io/advisories/CVE-2017-7818.md) `CVE-2017-7818` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: File downloads encoded with "blob:" and "data:" URL elements bypassed normal file…](https://agentprime.io/advisories/CVE-2017-7814.md) `CVE-2017-7814` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.](https://agentprime.io/advisories/CVE-2017-7810.md) `CVE-2017-7810` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the…](https://agentprime.io/advisories/CVE-2017-7807.md) `CVE-2017-7807` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.](https://agentprime.io/advisories/CVE-2017-7805.md) `CVE-2017-7805` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by…](https://agentprime.io/advisories/CVE-2017-7804.md) `CVE-2017-7804` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: When a page's content security policy (CSP) header contains a "sandbox" directive…](https://agentprime.io/advisories/CVE-2017-7803.md) `CVE-2017-7803` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize…](https://agentprime.io/advisories/CVE-2017-7802.md) `CVE-2017-7802` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur while re-computing layout for a "marquee"…](https://agentprime.io/advisories/CVE-2017-7801.md) `CVE-2017-7801` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the…](https://agentprime.io/advisories/CVE-2017-7800.md) `CVE-2017-7800` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the…](https://agentprime.io/advisories/CVE-2017-7793.md) `CVE-2017-7793` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A buffer overflow will occur when viewing a certificate in the certificate manager if the…](https://agentprime.io/advisories/CVE-2017-7792.md) `CVE-2017-7792` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: On pages containing an iframe, the "data:" protocol can be used to create a modal alert…](https://agentprime.io/advisories/CVE-2017-7791.md) `CVE-2017-7791` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: Same-origin policy protections can be bypassed on pages with embedded iframes during page…](https://agentprime.io/advisories/CVE-2017-7787.md) `CVE-2017-7787` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements.](https://agentprime.io/advisories/CVE-2017-7786.md) `CVE-2017-7786` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: A buffer overflow can occur when manipulating Accessible Rich Internet Applications…](https://agentprime.io/advisories/CVE-2017-7785.md) `CVE-2017-7785` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Thunderbird: An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is…](https://agentprime.io/advisories/CVE-2017-7782.md) `CVE-2017-7782` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2.](https://agentprime.io/advisories/CVE-2017-7779.md) `CVE-2017-7779` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds…](https://agentprime.io/advisories/CVE-2017-7778.md) `CVE-2017-7778` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 - [Mozilla Firefox: The "Mark of the Web" was not correctly saved on Windows when files with very long names…](https://agentprime.io/advisories/CVE-2017-7765.md) `CVE-2017-7765` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .