# Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Firefox: The executable file warning was not presented when downloading .inetloc files, which…](https://agentprime.io/advisories/CVE-2021-38510.md)
  `CVE-2021-38510` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Thunderbird unexpectedly enabled JavaScript in the composition area.](https://agentprime.io/advisories/CVE-2021-43528.md)
  `CVE-2021-43528` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2021-43534.md)
  `CVE-2021-43534` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Firefox: A use-after-free could have occured when an HTTP2 session object was released on a…](https://agentprime.io/advisories/CVE-2021-43535.md)
  `CVE-2021-43535` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: Under certain circumstances, asynchronous functions could have caused a navigation to…](https://agentprime.io/advisories/CVE-2021-43536.md)
  `CVE-2021-43536` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to…](https://agentprime.io/advisories/CVE-2021-43537.md)
  `CVE-2021-43537` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: By misusing a race in our notification code…](https://agentprime.io/advisories/CVE-2021-43538.md)
  `CVE-2021-43538` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: Failure to correctly record the location of live pointers across wasm instance calls…](https://agentprime.io/advisories/CVE-2021-43539.md)
  `CVE-2021-43539` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: When invoking protocol handlers for external protocols…](https://agentprime.io/advisories/CVE-2021-43541.md)
  `CVE-2021-43541` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: Using XMLHttpRequest, an attacker could have identified installed applications by probing…](https://agentprime.io/advisories/CVE-2021-43542.md)
  `CVE-2021-43542` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script…](https://agentprime.io/advisories/CVE-2021-43543.md)
  `CVE-2021-43543` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Using the Location API in a loop could have caused severe application hangs and crashes.](https://agentprime.io/advisories/CVE-2021-43545.md)
  `CVE-2021-43545` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Mozilla Thunderbird: It was possible to recreate previous cursor spoofing attacks against users with a zoomed…](https://agentprime.io/advisories/CVE-2021-43546.md)
  `CVE-2021-43546` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021
- [Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers.](https://agentprime.io/advisories/CVE-2021-29991.md)
  `CVE-2021-29991` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla Firefox: When delegating navigations to the operating system…](https://agentprime.io/advisories/CVE-2021-38492.md)
  `CVE-2021-38492` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13.](https://agentprime.io/advisories/CVE-2021-38493.md)
  `CVE-2021-38493` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0.](https://agentprime.io/advisories/CVE-2021-38495.md)
  `CVE-2021-38495` · CVE record: Mozilla Thunderbird and 1 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla Thunderbird: During operations on MessageTasks, a task may have been removed while it was still…](https://agentprime.io/advisories/CVE-2021-38496.md)
  `CVE-2021-38496` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla Firefox: Through use of reportValidity() and window.open()…](https://agentprime.io/advisories/CVE-2021-38497.md)
  `CVE-2021-38497` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla Firefox: During process shutdown, a document could have caused a use-after-free of a languages…](https://agentprime.io/advisories/CVE-2021-38498.md)
  `CVE-2021-38498` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.](https://agentprime.io/advisories/CVE-2021-38500.md)
  `CVE-2021-38500` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.](https://agentprime.io/advisories/CVE-2021-38501.md)
  `CVE-2021-38501` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection.](https://agentprime.io/advisories/CVE-2021-38502.md)
  `CVE-2021-38502` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 3 Nov 2021
- [Mozilla Thunderbird: Uninitialized memory in a canvas object could have caused an incorrect free() leading to…](https://agentprime.io/advisories/CVE-2021-29980.md)
  `CVE-2021-29980` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Firefox: An issue present in lowering/register allocation could have led to obscure but…](https://agentprime.io/advisories/CVE-2021-29981.md)
  `CVE-2021-29981` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Firefox: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of…](https://agentprime.io/advisories/CVE-2021-29982.md)
  `CVE-2021-29982` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Thunderbird: Instruction reordering resulted in a sequence of instructions that would cause an object…](https://agentprime.io/advisories/CVE-2021-29984.md)
  `CVE-2021-29984` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Thunderbird: A use-after-free vulnerability in media channels could have led to memory corruption and…](https://agentprime.io/advisories/CVE-2021-29985.md)
  `CVE-2021-29985` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Thunderbird: A suspected race condition when calling getaddrinfo led to memory corruption and a…](https://agentprime.io/advisories/CVE-2021-29986.md)
  `CVE-2021-29986` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Firefox: After requesting multiple permissions, and closing the first permission panel…](https://agentprime.io/advisories/CVE-2021-29987.md)
  `CVE-2021-29987` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Thunderbird: Firefox incorrectly treated an inline list-item element as a block element…](https://agentprime.io/advisories/CVE-2021-29988.md)
  `CVE-2021-29988` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.](https://agentprime.io/advisories/CVE-2021-29989.md)
  `CVE-2021-29989` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021
- [Mozilla Thunderbird: If Thunderbird was configured to use STARTTLS for an IMAP connection…](https://agentprime.io/advisories/CVE-2021-29969.md)
  `CVE-2021-29969` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 5 Aug 2021
- [Mozilla Thunderbird: A malicious webpage could have triggered a use-after-free, memory corruption…](https://agentprime.io/advisories/CVE-2021-29970.md)
  `CVE-2021-29970` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Aug 2021
- [Mozilla Thunderbird: Mozilla developers reported memory safety bugs present in code shared between Firefox and…](https://agentprime.io/advisories/CVE-2021-29976.md)
  `CVE-2021-29976` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Aug 2021
- [Mozilla Thunderbird: If a Thunderbird user has previously imported Alice's OpenPGP key…](https://agentprime.io/advisories/CVE-2021-23991.md)
  `CVE-2021-23991` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature.](https://agentprime.io/advisories/CVE-2021-23992.md)
  `CVE-2021-23992` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: An attacker may perform a DoS attack to prevent a user from sending encrypted email to a…](https://agentprime.io/advisories/CVE-2021-23993.md)
  `CVE-2021-23993` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: A WebGL framebuffer was not initialized early enough…](https://agentprime.io/advisories/CVE-2021-23994.md)
  `CVE-2021-23994` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [When Responsive Design Mode was enabled, it used references to objects that were previously freed.](https://agentprime.io/advisories/CVE-2021-23995.md)
  `CVE-2021-23995` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: Through complicated navigations with new windows…](https://agentprime.io/advisories/CVE-2021-23998.md)
  `CVE-2021-23998` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: If a Blob URL was loaded through some unusual user interaction…](https://agentprime.io/advisories/CVE-2021-23999.md)
  `CVE-2021-23999` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D)…](https://agentprime.io/advisories/CVE-2021-24002.md)
  `CVE-2021-24002` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: The WebAssembly JIT could miscalculate the size of a return type…](https://agentprime.io/advisories/CVE-2021-29945.md)
  `CVE-2021-29945` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: Ports that were written as an integer overflow above the bounds of a 16-bit integer could…](https://agentprime.io/advisories/CVE-2021-29946.md)
  `CVE-2021-29946` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: Signatures are written to disk before and read during verification…](https://agentprime.io/advisories/CVE-2021-29948.md)
  `CVE-2021-29948` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: When loading the shared library that provides the OTR protocol implementation…](https://agentprime.io/advisories/CVE-2021-29949.md)
  `CVE-2021-29949` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption…](https://agentprime.io/advisories/CVE-2021-29950.md)
  `CVE-2021-29950` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which…](https://agentprime.io/advisories/CVE-2021-29951.md)
  `CVE-2021-29951` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version…](https://agentprime.io/advisories/CVE-2021-29956.md)
  `CVE-2021-29956` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: If a MIME encoded email contains an OpenPGP inline signed or encrypted message part…](https://agentprime.io/advisories/CVE-2021-29957.md)
  `CVE-2021-29957` · CVE record: Mozilla Thunderbird · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: A locally-installed hostile program could send \`WM_COPYDATA\` messages that Firefox would…](https://agentprime.io/advisories/CVE-2021-29964.md)
  `CVE-2021-29964` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.](https://agentprime.io/advisories/CVE-2021-29967.md)
  `CVE-2021-29967` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox ESR: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip…](https://agentprime.io/advisories/CVE-2021-23981.md)
  `CVE-2021-23981` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox ESR: Using techniques that built on the slipstream research…](https://agentprime.io/advisories/CVE-2021-23982.md)
  `CVE-2021-23982` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [A malicious extension could have opened a popup window lacking an address bar.](https://agentprime.io/advisories/CVE-2021-23984.md)
  `CVE-2021-23984` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2021-23987.md)
  `CVE-2021-23987` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.](https://agentprime.io/advisories/CVE-2021-23964.md)
  `CVE-2021-23964` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.](https://agentprime.io/advisories/CVE-2021-23978.md)
  `CVE-2021-23978` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: If a user clicked into a specifically crafted PDF…](https://agentprime.io/advisories/CVE-2021-23953.md)
  `CVE-2021-23953` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021

Newest: <https://agentprime.io/advisories/technology/mozilla-thunderbird.md>
Older: <https://agentprime.io/advisories/technology/mozilla-thunderbird.md?cursor=WyIyMDIxLTAyLTI2VDAyOjExOjA4LjAwMDAwMFoiLCJDVkUtMjAyMS0yMzk1MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-thunderbird&cursor=WyIyMDIxLTEyLTA4VDIxOjIxOjMwLjAwMDAwMFoiLCJDVkUtMjAyMS0zODUwOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-thunderbird/?cursor=WyIyMDIxLTEyLTA4VDIxOjIxOjMwLjAwMDAwMFoiLCJDVkUtMjAyMS0zODUwOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.