# Mozilla Thunderbird. Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Clickjacking vulnerability could have led to leaking saved payment card details](https://agentprime.io/advisories/CVE-2025-5267.md) `CVE-2025-5267` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-1021 - [Script element events leaked cross-origin resource status](https://agentprime.io/advisories/CVE-2025-5266.md) `CVE-2025-5266` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 27 May 2025 · Tags: Information disclosure - [Potential local code execution in “Copy as cURL” command](https://agentprime.io/advisories/CVE-2025-5265.md) `CVE-2025-5265` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2025 · Tags: Command injection - [Potential local code execution in “Copy as cURL” command](https://agentprime.io/advisories/CVE-2025-5264.md) `CVE-2025-5264` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2025 · Tags: Command injection - [Error handling for script execution was incorrectly isolated from web content](https://agentprime.io/advisories/CVE-2025-5263.md) `CVE-2025-5263` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-346 - [Double free in Mozilla Thunderbird](https://agentprime.io/advisories/CVE-2025-5262.md) `CVE-2025-5262` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Out-of-bounds access when optimizing linear sums](https://agentprime.io/advisories/CVE-2025-4919.md) `CVE-2025-4919` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 17 May 2025 · Tags: Memory corruption - [Out-of-bounds access when resolving Promise objects](https://agentprime.io/advisories/CVE-2025-4918.md) `CVE-2025-4918` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2025 · Tags: Memory corruption - [Tracking Links in Attachments Bypassed Remote Content Blocking](https://agentprime.io/advisories/CVE-2025-3932.md) `CVE-2025-3932` · CVE record: Mozilla Thunderbird · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2025 · Tags: Authentication bypass - [JavaScript Execution via Spoofed PDF Attachment and file:/// Link](https://agentprime.io/advisories/CVE-2025-3909.md) `CVE-2025-3909` · CVE record: Mozilla Thunderbird · CVSS 8.1 High · Not analysed yet · Published 14 May 2025 · Tags: CWE-356 - [Sender Spoofing via Malformed From Header in Thunderbird](https://agentprime.io/advisories/CVE-2025-3875.md) `CVE-2025-3875` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 14 May 2025 · Tags: Authentication bypass - [Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10](https://agentprime.io/advisories/CVE-2025-4093.md) `CVE-2025-4093` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 138 and Thunderbird 138](https://agentprime.io/advisories/CVE-2025-4092.md) `CVE-2025-4092` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10](https://agentprime.io/advisories/CVE-2025-4091.md) `CVE-2025-4091` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Leaked library paths in Thunderbird for Android](https://agentprime.io/advisories/CVE-2025-4090.md) `CVE-2025-4090` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Information disclosure - [Potential local code execution in "copy as cURL" command](https://agentprime.io/advisories/CVE-2025-4089.md) `CVE-2025-4089` · CVE record: Mozilla Firefox and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Command injection - [Cross-site request forgery via storage access API redirects](https://agentprime.io/advisories/CVE-2025-4088.md) `CVE-2025-4088` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Cross-site request forgery (CSRF) - [Unsafe attribute access during XPath parsing](https://agentprime.io/advisories/CVE-2025-4087.md) `CVE-2025-4087` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Specially crafted filename could be used to obscure download type](https://agentprime.io/advisories/CVE-2025-4086.md) `CVE-2025-4086` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-451 - [Potential information leakage and privilege escalation in UITour actor](https://agentprime.io/advisories/CVE-2025-4085.md) `CVE-2025-4085` · CVE record: Mozilla Firefox and 1 more · CVSS 7.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Privilege escalation - [Potential local code execution in "copy as cURL" command](https://agentprime.io/advisories/CVE-2025-4084.md) `CVE-2025-4084` · CVE record: Mozilla Firefox and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-116 - [Process isolation bypass using "javascript:" URI links in cross-origin frames](https://agentprime.io/advisories/CVE-2025-4083.md) `CVE-2025-4083` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-653 - [WebGL shader attribute memory corruption in Thunderbird for macOS](https://agentprime.io/advisories/CVE-2025-4082.md) `CVE-2025-4082` · CVE record: Mozilla Firefox and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Privilege escalation in Thunderbird Updater](https://agentprime.io/advisories/CVE-2025-2817.md) `CVE-2025-2817` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 29 Apr 2025 · Tags: Path traversal - [User Interface (UI) Misrepresentation of attachment URL](https://agentprime.io/advisories/CVE-2025-3523.md) `CVE-2025-3523` · CVE record: Mozilla Thunderbird · CVSS 6.4 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-451 - [Information Disclosure of /tmp directory listing](https://agentprime.io/advisories/CVE-2025-2830.md) `CVE-2025-2830` · CVE record: Mozilla Thunderbird · CVSS 6.3 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Path traversal - [Leak of hashed Window credentials via crafted attachment URL](https://agentprime.io/advisories/CVE-2025-3522.md) `CVE-2025-3522` · CVE record: Mozilla Thunderbird · CVSS 6.3 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Open redirect - [Memory safety bugs fixed in Firefox 137 and Thunderbird 137](https://agentprime.io/advisories/CVE-2025-3034.md) `CVE-2025-3034` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 - [Opening local .url files could lead to another file being opened](https://agentprime.io/advisories/CVE-2025-3033.md) `CVE-2025-3033` · CVE record: Mozilla Firefox and 1 more · CVSS 7.7 High · Not analysed yet · Published 1 Apr 2025 · Tags: Path traversal - [Leaking file descriptors from the fork server](https://agentprime.io/advisories/CVE-2025-3032.md) `CVE-2025-3032` · CVE record: Mozilla Firefox and 1 more · CVSS 7.4 High · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-403 - [JIT optimization bug with different stack slot sizes](https://agentprime.io/advisories/CVE-2025-3031.md) `CVE-2025-3031` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: Information disclosure - [Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9](https://agentprime.io/advisories/CVE-2025-3030.md) `CVE-2025-3030` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: Memory corruption - [URL Bar Spoofing via non-BMP Unicode characters](https://agentprime.io/advisories/CVE-2025-3029.md) `CVE-2025-3029` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 1 Apr 2025 · Tags: Authentication bypass - [Use-after-free triggered by XSLTProcessor](https://agentprime.io/advisories/CVE-2025-3028.md) `CVE-2025-3028` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: Memory corruption - [Downloading of OpenPGP keys from WKD used incorrect padding](https://agentprime.io/advisories/CVE-2025-26695.md) `CVE-2025-26695` · CVE record: Mozilla Thunderbird · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2025 - [Crafted email message incorrectly shown as being encrypted](https://agentprime.io/advisories/CVE-2025-26696.md) `CVE-2025-26696` · CVE record: Mozilla Thunderbird · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2025 · Tags: Authentication bypass - [Memory safety bugs fixed in Firefox 136 and Thunderbird 136](https://agentprime.io/advisories/CVE-2025-1943.md) `CVE-2025-1943` · CVE record: Mozilla Firefox and 1 more · CVSS 8.2 High · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8](https://agentprime.io/advisories/CVE-2025-1938.md) `CVE-2025-1938` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8](https://agentprime.io/advisories/CVE-2025-1937.md) `CVE-2025-1937` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1260 - [Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents](https://agentprime.io/advisories/CVE-2025-1936.md) `CVE-2025-1936` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-158 - [Clickjacking the registerProtocolHandler info-bar](https://agentprime.io/advisories/CVE-2025-1935.md) `CVE-2025-1935` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Cross-site scripting (XSS) - [Disclosure of uninitialized memory when .toUpperCase() causes string to get longer](https://agentprime.io/advisories/CVE-2025-1942.md) `CVE-2025-1942` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Unexpected GC during RegExp bailout processing](https://agentprime.io/advisories/CVE-2025-1934.md) `CVE-2025-1934` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2025 - [JIT corruption of WASM i32 return values on 64-bit CPUs](https://agentprime.io/advisories/CVE-2025-1933.md) `CVE-2025-1933` · CVE record: Mozilla Firefox and 1 more · CVSS 7.6 High · Not analysed yet · Published 4 Mar 2025 - [Inconsistent comparator in XSLT sorting led to out-of-bounds access](https://agentprime.io/advisories/CVE-2025-1932.md) `CVE-2025-1932` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Use-after-free in WebTransportChild](https://agentprime.io/advisories/CVE-2025-1931.md) `CVE-2025-1931` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [AudioIPC StreamData could trigger a use-after-free in the Browser process](https://agentprime.io/advisories/CVE-2025-1930.md) `CVE-2025-1930` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Unsanitized address book fields](https://agentprime.io/advisories/CVE-2025-1015.md) `CVE-2025-1015` · CVE record: Mozilla Thunderbird · CVSS 5.4 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: Cross-site scripting (XSS) - [Memory safety bugs fixed in Firefox 135 and Thunderbird 135](https://agentprime.io/advisories/CVE-2025-1020.md) `CVE-2025-1020` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7](https://agentprime.io/advisories/CVE-2025-1017.md) `CVE-2025-1017` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7](https://agentprime.io/advisories/CVE-2025-1016.md) `CVE-2025-1016` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption - [Address of e-mail sender can be spoofed by malicious email](https://agentprime.io/advisories/CVE-2025-0510.md) `CVE-2025-0510` · CVE record: Mozilla Thunderbird · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-345 - [Certificate length was not properly checked](https://agentprime.io/advisories/CVE-2025-1014.md) `CVE-2025-1014` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 4 Feb 2025 · Tags: Weak cryptography or TLS - [Potential opening of private browsing tabs in normal browsing windows](https://agentprime.io/advisories/CVE-2025-1013.md) `CVE-2025-1013` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: Race condition - [Fullscreen notification not properly displayed](https://agentprime.io/advisories/CVE-2025-1019.md) `CVE-2025-1019` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-1021 - [Use-after-free during concurrent delazification](https://agentprime.io/advisories/CVE-2025-1012.md) `CVE-2025-1012` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption - [A bug in WebAssembly code generation could result in a crash](https://agentprime.io/advisories/CVE-2025-1011.md) `CVE-2025-1011` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Code injection - [Fullscreen notification is not displayed when fullscreen is re-requested](https://agentprime.io/advisories/CVE-2025-1018.md) `CVE-2025-1018` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-1021 - [Use-after-free in Custom Highlight](https://agentprime.io/advisories/CVE-2025-1010.md) `CVE-2025-1010` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption - [Use-after-free in XSLT](https://agentprime.io/advisories/CVE-2025-1009.md) `CVE-2025-1009` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2025 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .