# Mozilla Thunderbird. Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Use after free in Mozilla Thunderbird and others](https://agentprime.io/advisories/CVE-2020-6819.md) `CVE-2020-6819` · CVE record: Mozilla Thunderbird and 2 more · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 24 Apr 2020 · Tags: Memory corruption - [Race condition in Mozilla Thunderbird and others](https://agentprime.io/advisories/CVE-2020-6820.md) `CVE-2020-6820` · CVE record: Mozilla Thunderbird and 2 more · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 24 Apr 2020 · Tags: Race condition - [Mozilla Thunderbird: When reading from areas partially or fully outside the source resource with WebGL's…](https://agentprime.io/advisories/CVE-2020-6821.md) `CVE-2020-6821` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: On 32-bit builds, an out of bounds write could have occurred when processing an image…](https://agentprime.io/advisories/CVE-2020-6822.md) `CVE-2020-6822` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: Mozilla developers and community members Tyson Smith and Christian Holler reported memory…](https://agentprime.io/advisories/CVE-2020-6825.md) `CVE-2020-6825` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: When removing data about an origin whose tab was recently closed…](https://agentprime.io/advisories/CVE-2020-6805.md) `CVE-2020-6805` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: By carefully crafting promise resolutions…](https://agentprime.io/advisories/CVE-2020-6806.md) `CVE-2020-6806` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: When a device was changed while a stream was about to be destroyed…](https://agentprime.io/advisories/CVE-2020-6807.md) `CVE-2020-6807` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP…](https://agentprime.io/advisories/CVE-2020-6811.md) `CVE-2020-6811` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: The first time AirPods are connected to an iPhone…](https://agentprime.io/advisories/CVE-2020-6812.md) `CVE-2020-6812` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5.](https://agentprime.io/advisories/CVE-2020-6814.md) `CVE-2020-6814` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2020-6800.md) `CVE-2020-6800` · CVE record: Mozilla Thunderbird and 1 more · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: If a template tag was used in a select tag…](https://agentprime.io/advisories/CVE-2020-6798.md) `CVE-2020-6798` · CVE record: Mozilla Thunderbird and 1 more · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: By downloading a file with the .fileloc extension…](https://agentprime.io/advisories/CVE-2020-6797.md) `CVE-2020-6797` · CVE record: Mozilla Thunderbird and 1 more · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: When processing a message that contains multiple S/MIME signatures…](https://agentprime.io/advisories/CVE-2020-6795.md) `CVE-2020-6795` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: If a user saved passwords before Thunderbird 60 and then later set a master password…](https://agentprime.io/advisories/CVE-2020-6794.md) `CVE-2020-6794` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: When processing an email message with an ill-formed envelope…](https://agentprime.io/advisories/CVE-2020-6793.md) `CVE-2020-6793` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Mozilla Thunderbird: When deriving an identifier for an email message…](https://agentprime.io/advisories/CVE-2020-6792.md) `CVE-2020-6792` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 2 Mar 2020 - [Type confusion in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-17026.md) `CVE-2019-17026` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.46 · Not analysed yet · Published 2 Mar 2020 · Tags: Memory corruption - [Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.](https://agentprime.io/advisories/CVE-2019-17012.md) `CVE-2019-17012` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when retrieving a document from a DocShell in the antitracking…](https://agentprime.io/advisories/CVE-2019-17011.md) `CVE-2019-17011` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when checking the Resist Fingerprinting preference during…](https://agentprime.io/advisories/CVE-2019-17010.md) `CVE-2019-17010` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When running, the updater service wrote status and log files to an unrestricted location…](https://agentprime.io/advisories/CVE-2019-17009.md) `CVE-2019-17009` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [When using nested workers, a use-after-free could occur during worker destruction.](https://agentprime.io/advisories/CVE-2019-17008.md) `CVE-2019-17008` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: The plain text serializer used a fixed-size array for the number of \
    elements it…](https://agentprime.io/advisories/CVE-2019-17005.md) `CVE-2019-17005` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11764.md) `CVE-2019-11764` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox…](https://agentprime.io/advisories/CVE-2019-11763.md) `CVE-2019-11763` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: If two same-origin documents set document.domain differently to become cross-origin…](https://agentprime.io/advisories/CVE-2019-11762.md) `CVE-2019-11762` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: By using a form with a data URI it was possible to gain access to the privileged JSONView…](https://agentprime.io/advisories/CVE-2019-11761.md) `CVE-2019-11761` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.](https://agentprime.io/advisories/CVE-2019-11760.md) `CVE-2019-11760` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: An attacker could have caused 4 bytes of HMAC output to be written past the end of a…](https://agentprime.io/advisories/CVE-2019-11759.md) `CVE-2019-11759` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when…](https://agentprime.io/advisories/CVE-2019-11758.md) `CVE-2019-11758` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: When following the value's prototype chain…](https://agentprime.io/advisories/CVE-2019-11757.md) `CVE-2019-11757` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data…](https://agentprime.io/advisories/CVE-2019-11745.md) `CVE-2019-11745` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when…](https://agentprime.io/advisories/CVE-2019-11739.md) `CVE-2019-11739` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11740.md) `CVE-2019-11740` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A same-origin policy violation occurs allowing the theft of cross-origin images through a…](https://agentprime.io/advisories/CVE-2019-11742.md) `CVE-2019-11742` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft…](https://agentprime.io/advisories/CVE-2019-11743.md) `CVE-2019-11743` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Some HTML elements, such as \<title\> and \<textarea>…](https://agentprime.io/advisories/CVE-2019-11744.md) `CVE-2019-11744` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A use-after-free vulnerability can occur while manipulating video elements if the body is…](https://agentprime.io/advisories/CVE-2019-11746.md) `CVE-2019-11746` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: It is possible to delete an IndexedDB key value and subsequently try to extract it during…](https://agentprime.io/advisories/CVE-2019-11752.md) `CVE-2019-11752` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Thunderbird: A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData…](https://agentprime.io/advisories/CVE-2019-11755.md) `CVE-2019-11755` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-9800.md) `CVE-2019-9800` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by…](https://agentprime.io/advisories/CVE-2019-9811.md) `CVE-2019-9811` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: If hyperthreading is not disabled, a timing attack vulnerability exists…](https://agentprime.io/advisories/CVE-2019-9815.md) `CVE-2019-9815` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A possible vulnerability exists where type confusion can occur when manipulating…](https://agentprime.io/advisories/CVE-2019-9816.md) `CVE-2019-9816` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Images from a different domain can be read using a canvas object in some circumstances.](https://agentprime.io/advisories/CVE-2019-9817.md) `CVE-2019-9817` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A race condition is present in the crash generation server used to generate data for the…](https://agentprime.io/advisories/CVE-2019-9818.md) `CVE-2019-9818` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A vulnerability where a JavaScript compartment mismatch can occur while working with the…](https://agentprime.io/advisories/CVE-2019-9819.md) `CVE-2019-9819` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur in the chrome event handler when it is freed…](https://agentprime.io/advisories/CVE-2019-9820.md) `CVE-2019-9820` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an…](https://agentprime.io/advisories/CVE-2019-11691.md) `CVE-2019-11691` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when listeners are removed from the event…](https://agentprime.io/advisories/CVE-2019-11692.md) `CVE-2019-11692` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific…](https://agentprime.io/advisories/CVE-2019-11693.md) `CVE-2019-11693` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A vulnerability exists in the Windows sandbox where an uninitialized value in memory can…](https://agentprime.io/advisories/CVE-2019-11694.md) `CVE-2019-11694` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the…](https://agentprime.io/advisories/CVE-2019-11698.md) `CVE-2019-11698` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in…](https://agentprime.io/advisories/CVE-2019-11703.md) `CVE-2019-11703` · CVE record: Mozilla Thunderbird · No CVSS score · EPSS 0.11 · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in…](https://agentprime.io/advisories/CVE-2019-11704.md) `CVE-2019-11704` · CVE record: Mozilla Thunderbird · No CVSS score · EPSS 0.11 · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in…](https://agentprime.io/advisories/CVE-2019-11705.md) `CVE-2019-11705` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a type confusion in…](https://agentprime.io/advisories/CVE-2019-11706.md) `CVE-2019-11706` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Type confusion in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-11707.md) `CVE-2019-11707` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.38 · Not analysed yet · Published 23 Jul 2019 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .