# Mozilla Thunderbird. Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Improper input validation in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-11708.md) `CVE-2019-11708` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.56 · Not analysed yet · Published 23 Jul 2019 · Tags: CWE-20 - [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11709.md) `CVE-2019-11709` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: When an inner window is reused, it does not consider the use of document.domain for…](https://agentprime.io/advisories/CVE-2019-11711.md) `CVE-2019-11711` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: POST requests made by NPAPI plugins, such as Flash…](https://agentprime.io/advisories/CVE-2019-11712.md) `CVE-2019-11712` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed…](https://agentprime.io/advisories/CVE-2019-11713.md) `CVE-2019-11713` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: Due to an error while parsing page content…](https://agentprime.io/advisories/CVE-2019-11715.md) `CVE-2019-11715` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: A vulnerability exists where the caret ("^") character is improperly escaped constructing…](https://agentprime.io/advisories/CVE-2019-11717.md) `CVE-2019-11717` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes…](https://agentprime.io/advisories/CVE-2019-11719.md) `CVE-2019-11719` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values…](https://agentprime.io/advisories/CVE-2019-11729.md) `CVE-2019-11729` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: A vulnerability exists where if a user opens a locally saved HTML file…](https://agentprime.io/advisories/CVE-2019-11730.md) `CVE-2019-11730` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: Firefox will accept any registered Program ID as an external protocol handler and offer…](https://agentprime.io/advisories/CVE-2019-9801.md) `CVE-2019-9801` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when the SMIL animation controller incorrectly…](https://agentprime.io/advisories/CVE-2019-9796.md) `CVE-2019-9796` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could…](https://agentprime.io/advisories/CVE-2019-9795.md) `CVE-2019-9795` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A vulnerability was discovered where specific command line arguments are not properly…](https://agentprime.io/advisories/CVE-2019-9794.md) `CVE-2019-9794` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A mechanism was discovered that removes some bounds checking for string, array…](https://agentprime.io/advisories/CVE-2019-9793.md) `CVE-2019-9793` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic…](https://agentprime.io/advisories/CVE-2019-9792.md) `CVE-2019-9792` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: The type inference system allows the compilation of functions that can cause type…](https://agentprime.io/advisories/CVE-2019-9791.md) `CVE-2019-9791` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is…](https://agentprime.io/advisories/CVE-2019-9790.md) `CVE-2019-9790` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-9788.md) `CVE-2019-9788` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A crash can occur when processing a crafted S/MIME message or an XPI package containing a…](https://agentprime.io/advisories/CVE-2018-18513.md) `CVE-2018-18513` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [A use-after-free vulnerability can occur while playing a sound notification in Thunderbird.](https://agentprime.io/advisories/CVE-2018-18512.md) `CVE-2018-18512` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Thunderbird: A flaw during verification of certain S/MIME signatures causes emails to be shown in…](https://agentprime.io/advisories/CVE-2018-18509.md) `CVE-2018-18509` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Firefox: Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method…](https://agentprime.io/advisories/CVE-2019-9810.md) `CVE-2019-9810` · CVE record: Mozilla Firefox and 2 more · No CVSS score · EPSS 0.27 · Not analysed yet · Published 26 Apr 2019 - [Mozilla Firefox: Incorrect handling of \_\_proto\_\_ mutations may lead to type confusion in IonMonkey JIT…](https://agentprime.io/advisories/CVE-2019-9813.md) `CVE-2019-9813` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019 - [Mozilla Firefox: A same-origin policy violation allowing the theft of cross-origin URL entries when using…](https://agentprime.io/advisories/CVE-2018-18499.md) `CVE-2018-18499` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: A potential vulnerability leading to an integer overflow can occur during buffer size…](https://agentprime.io/advisories/CVE-2018-18498.md) `CVE-2018-18498` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: A same-origin policy violation allowing the theft of cross-origin URL entries when using…](https://agentprime.io/advisories/CVE-2018-18494.md) `CVE-2018-18494` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: A buffer overflow can occur in the Skia library during buffer offset calculations with…](https://agentprime.io/advisories/CVE-2018-18493.md) `CVE-2018-18493` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur after deleting a selection element due to a weak…](https://agentprime.io/advisories/CVE-2018-18492.md) `CVE-2018-18492` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-12405.md) `CVE-2018-12405` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Firefox: A potential vulnerability was found in 32-bit builds where an integer overflow during the…](https://agentprime.io/advisories/CVE-2018-12393.md) `CVE-2018-12393` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Firefox: When manipulating user events in nested loops while opening a document through script…](https://agentprime.io/advisories/CVE-2018-12392.md) `CVE-2018-12392` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Firefox: During HTTP Live Stream playback on Firefox for Android…](https://agentprime.io/advisories/CVE-2018-12391.md) `CVE-2018-12391` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-12390.md) `CVE-2018-12390` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2.](https://agentprime.io/advisories/CVE-2018-12389.md) `CVE-2018-12389` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 28 Feb 2019 - [Mozilla Thunderbird: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079…](https://agentprime.io/advisories/CVE-2018-18505.md) `CVE-2018-18505` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Feb 2019 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-18501.md) `CVE-2018-18501` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Feb 2019 - [Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8.](https://agentprime.io/advisories/CVE-2018-5188.md) `CVE-2018-5188` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Memory safety bugs present in Firefox 60 and Firefox ESR 60.](https://agentprime.io/advisories/CVE-2018-5187.md) `CVE-2018-5187` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A vulnerability can occur when capturing a media stream when the media source type is…](https://agentprime.io/advisories/CVE-2018-5156.md) `CVE-2018-5156` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by…](https://agentprime.io/advisories/CVE-2018-12385.md) `CVE-2018-12385` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Firefox: If a user saved passwords before Firefox 58 and then later set a master password…](https://agentprime.io/advisories/CVE-2018-12383.md) `CVE-2018-12383` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Firefox: When the Mozilla Updater opens a MAR format file which contains a very long item…](https://agentprime.io/advisories/CVE-2018-12379.md) `CVE-2018-12379` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur when an IndexedDB index is deleted while still…](https://agentprime.io/advisories/CVE-2018-12378.md) `CVE-2018-12378` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Firefox: A use-after-free vulnerability can occur when refresh driver timers are refreshed in some…](https://agentprime.io/advisories/CVE-2018-12377.md) `CVE-2018-12377` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.](https://agentprime.io/advisories/CVE-2018-12376.md) `CVE-2018-12376` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: Plaintext of decrypted emails can leak through by user submitting an embedded form by…](https://agentprime.io/advisories/CVE-2018-12374.md) `CVE-2018-12374` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when…](https://agentprime.io/advisories/CVE-2018-12373.md) `CVE-2018-12373` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: Decrypted S/MIME parts, when included in HTML crafted for an attack…](https://agentprime.io/advisories/CVE-2018-12372.md) `CVE-2018-12372` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: Windows 10 does not warn users before opening executable files with the SettingContent-ms…](https://agentprime.io/advisories/CVE-2018-12368.md) `CVE-2018-12368` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: In the previous mitigations for Spectre…](https://agentprime.io/advisories/CVE-2018-12367.md) `CVE-2018-12367` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: An invalid grid size during QCMS (color profile) transformations can result in the…](https://agentprime.io/advisories/CVE-2018-12366.md) `CVE-2018-12366` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A compromised IPC child process can escape the content sandbox and list the names of…](https://agentprime.io/advisories/CVE-2018-12365.md) `CVE-2018-12365` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests…](https://agentprime.io/advisories/CVE-2018-12364.md) `CVE-2018-12364` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when script uses mutation events to move DOM…](https://agentprime.io/advisories/CVE-2018-12363.md) `CVE-2018-12363` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: An integer overflow can occur during graphics operations done by the Supplemental…](https://agentprime.io/advisories/CVE-2018-12362.md) `CVE-2018-12362` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [An integer overflow can occur in the SwizzleData code while calculating buffer sizes.](https://agentprime.io/advisories/CVE-2018-12361.md) `CVE-2018-12361` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when deleting an input element during a mutation…](https://agentprime.io/advisories/CVE-2018-12360.md) `CVE-2018-12360` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Mozilla Thunderbird: A buffer overflow can occur when rendering canvas content while adjusting the height and…](https://agentprime.io/advisories/CVE-2018-12359.md) `CVE-2018-12359` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018 - [Plaintext of decrypted emails can leak through by user submitting an embedded form.](https://agentprime.io/advisories/CVE-2018-5185.md) `CVE-2018-5185` · CVE record: Mozilla Thunderbird ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .