Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-11708 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Improper input validation in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-20
Not analysed yet 23 Jul 2019
CVE-2019-11709 CVE record

Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11711 CVE record

Mozilla Firefox ESR: When an inner window is reused, it does not consider the use of document.domain for…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11712 CVE record

Mozilla Firefox ESR: POST requests made by NPAPI plugins, such as Flash…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11713 CVE record

Mozilla Firefox ESR: A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11715 CVE record

Mozilla Firefox ESR: Due to an error while parsing page content…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11717 CVE record

Mozilla Firefox ESR: A vulnerability exists where the caret ("^") character is improperly escaped constructing…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11719 CVE record

Mozilla Firefox ESR: When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11729 CVE record

Mozilla Firefox ESR: Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11730 CVE record

Mozilla Firefox ESR: A vulnerability exists where if a user opens a locally saved HTML file…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9801 CVE record

Mozilla Thunderbird: Firefox will accept any registered Program ID as an external protocol handler and offer…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9796 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when the SMIL animation controller incorrectly…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9795 CVE record

Mozilla Thunderbird: A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9794 CVE record

Mozilla Thunderbird: A vulnerability was discovered where specific command line arguments are not properly…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9793 CVE record

Mozilla Thunderbird: A mechanism was discovered that removes some bounds checking for string, array…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9792 CVE record

Mozilla Thunderbird: The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9791 CVE record

Mozilla Thunderbird: The type inference system allows the compilation of functions that can cause type…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9790 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9788 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2018-18513 CVE record

Mozilla Thunderbird: A crash can occur when processing a crafted S/MIME message or an XPI package containing a…
- Mozilla Thunderbird
Not analysed yet 26 Apr 2019
CVE-2018-18512 CVE record

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird.
- Mozilla Thunderbird
Not analysed yet 26 Apr 2019
CVE-2018-18509 CVE record

Mozilla Thunderbird: A flaw during verification of certain S/MIME signatures causes emails to be shown in…
- Mozilla Thunderbird
Not analysed yet 26 Apr 2019
CVE-2019-9810 CVE record

Mozilla Firefox: Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2019-9813 CVE record

Mozilla Firefox: Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 26 Apr 2019
CVE-2018-18499 CVE record

Mozilla Firefox: A same-origin policy violation allowing the theft of cross-origin URL entries when using…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-18498 CVE record

Mozilla Thunderbird: A potential vulnerability leading to an integer overflow can occur during buffer size…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-18494 CVE record

Mozilla Thunderbird: A same-origin policy violation allowing the theft of cross-origin URL entries when using…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-18493 CVE record

Mozilla Thunderbird: A buffer overflow can occur in the Skia library during buffer offset calculations with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-18492 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur after deleting a selection element due to a weak…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12405 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12393 CVE record

Mozilla Firefox: A potential vulnerability was found in 32-bit builds where an integer overflow during the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12392 CVE record

Mozilla Firefox: When manipulating user events in nested loops while opening a document through script…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12391 CVE record

Mozilla Firefox: During HTTP Live Stream playback on Firefox for Android…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12390 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 28 Feb 2019
CVE-2018-12389 CVE record

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2.
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 28 Feb 2019
CVE-2018-18505 CVE record

Mozilla Thunderbird: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 5 Feb 2019
CVE-2018-18501 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 5 Feb 2019
CVE-2018-5188 CVE record

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-5187 CVE record

Memory safety bugs present in Firefox 60 and Firefox ESR 60.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-5156 CVE record

Mozilla Thunderbird: A vulnerability can occur when capturing a media stream when the media source type is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12385 CVE record

Mozilla Thunderbird: A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12383 CVE record

Mozilla Firefox: If a user saved passwords before Firefox 58 and then later set a master password…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12379 CVE record

Mozilla Firefox: When the Mozilla Updater opens a MAR format file which contains a very long item…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12378 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when an IndexedDB index is deleted while still…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12377 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when refresh driver timers are refreshed in some…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12376 CVE record

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12374 CVE record

Mozilla Thunderbird: Plaintext of decrypted emails can leak through by user submitting an embedded form by…
- Mozilla Thunderbird
Not analysed yet 18 Oct 2018
CVE-2018-12373 CVE record

Mozilla Thunderbird: dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when…
- Mozilla Thunderbird
Not analysed yet 18 Oct 2018
CVE-2018-12372 CVE record

Mozilla Thunderbird: Decrypted S/MIME parts, when included in HTML crafted for an attack…
- Mozilla Thunderbird
Not analysed yet 18 Oct 2018
CVE-2018-12368 CVE record

Mozilla Thunderbird: Windows 10 does not warn users before opening executable files with the SettingContent-ms…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12367 CVE record

Mozilla Thunderbird: In the previous mitigations for Spectre…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12366 CVE record

Mozilla Thunderbird: An invalid grid size during QCMS (color profile) transformations can result in the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12365 CVE record

Mozilla Thunderbird: A compromised IPC child process can escape the content sandbox and list the names of…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12364 CVE record

Mozilla Thunderbird: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12363 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when script uses mutation events to move DOM…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12362 CVE record

Mozilla Thunderbird: An integer overflow can occur during graphics operations done by the Supplemental…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12361 CVE record

An integer overflow can occur in the SwizzleData code while calculating buffer sizes.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12360 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when deleting an input element during a mutation…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12359 CVE record

Mozilla Thunderbird: A buffer overflow can occur when rendering canvas content while adjusting the height and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-5185 CVE record

Plaintext of decrypted emails can leak through by user submitting an embedded form.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018