Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-11721 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory safety bug fixed in Firefox 144 and Thunderbird 144
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-11719 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use-after-free caused by the native messaging web extension API on Windows
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-11716 CVE record

CVSS 6.5 Medium

Sandboxed iframes allowed links to open in external apps (Android only)
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-11715 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-11713 CVE record

CVSS 8.1 High

Potential user-assisted code execution in “Copy as cURL” command
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 14 Oct 2025
CVE-2025-11712 CVE record

CVSS 6.1 Medium

An OBJECT tag type attribute overrode browser behavior on web resources without a content-type
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 14 Oct 2025
CVE-2025-11708 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use-after-free in MediaTrackGraphImpl::GetInstance()
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-11714 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-11711 CVE record

CVSS 6.5 Medium

Some non-writable Object properties could be modified
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-591
Not analysed yet 14 Oct 2025
CVE-2025-11710 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cross-process information leaked due to malicious IPC messages
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 14 Oct 2025
CVE-2025-11709 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out of bounds read/write in a privileged process triggered by WebGL textures
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-10534 CVE record

CVSS 8.1 High

Spoofing issue in the Site Permissions component
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2025
CVE-2025-10531 CVE record

CVSS 5.4 Medium

Mitigation bypass in the Web Compatibility: Tooling component
- Mozilla Firefox
- Mozilla Thunderbird
- Authentication bypass
Not analysed yet 16 Sept 2025
CVE-2025-10530 CVE record

CVSS 6.5 Medium

Spoofing issue in the WebAuthn component in Firefox for Android
- Mozilla Firefox
- Mozilla Thunderbird
- Authentication bypass
Not analysed yet 16 Sept 2025
CVE-2025-10537 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 16 Sept 2025
CVE-2025-10536 CVE record

CVSS 6.2 Medium

Information disclosure in the Networking: Cache component
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 16 Sept 2025
CVE-2025-10532 CVE record

CVSS 6.5 Medium

Incorrect boundary conditions in the JavaScript: GC component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-754
Not analysed yet 16 Sept 2025
CVE-2025-10529 CVE record

CVSS 6.5 Medium

Same-origin policy bypass in the Layout component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-942
Not analysed yet 16 Sept 2025
CVE-2025-10528 CVE record

CVSS 7.3 High

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 16 Sept 2025
CVE-2025-10527 CVE record

CVSS 7.1 High

Sandbox escape due to use-after-free in the Graphics: Canvas2D component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 16 Sept 2025
CVE-2025-10533 CVE record

CVSS 8.8 High

Integer overflow in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 16 Sept 2025
CVE-2025-9184 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 19 Aug 2025
CVE-2025-9187 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory safety bugs fixed in Firefox 142 and Thunderbird 142
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 19 Aug 2025
CVE-2025-9182 CVE record

CVSS 7.5 High

Denial-of-service due to out-of-memory in the Graphics: WebRender component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 19 Aug 2025
CVE-2025-9185 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 19 Aug 2025
CVE-2025-9181 CVE record

CVSS 6.5 Medium

Uninitialized memory in the JavaScript Engine component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 19 Aug 2025
CVE-2025-9180 CVE record

CVSS 8.1 High

Same-origin policy bypass in the Graphics: Canvas2D component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 19 Aug 2025
CVE-2025-9179 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Sandbox escape due to invalid pointer in the Audio/Video: GMP component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 19 Aug 2025
CVE-2025-8044 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory safety bugs fixed in Firefox 141 and Thunderbird 141
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-8035 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-8040 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-8034 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-8033 CVE record

CVSS 6.5 Medium

Incorrect JavaScript state machine for generators
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-8039 CVE record

CVSS 8.1 High

Search terms persisted in URL bar
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 22 Jul 2025
CVE-2025-8038 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CSP frame-src was not correctly enforced for paths
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-345
Not analysed yet 22 Jul 2025
CVE-2025-8032 CVE record

CVSS 8.1 High

XSLT documents could bypass CSP
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 22 Jul 2025
CVE-2025-8031 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect URL stripping in CSP reports
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
Not analysed yet 22 Jul 2025
CVE-2025-8030 CVE record

CVSS 8.1 High

Potential user-assisted code execution in “Copy as cURL” command
- Mozilla Firefox
- Mozilla Thunderbird
- Code injection
Not analysed yet 22 Jul 2025
CVE-2025-8037 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Nameless cookies shadow secure cookies
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-614
Not analysed yet 22 Jul 2025
CVE-2025-8036 CVE record

CVSS 8.1 High

DNS rebinding circumvents CORS
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-350
Not analysed yet 22 Jul 2025
CVE-2025-8029 CVE record

CVSS 8.1 High

javascript: URLs executed on object and embed tags
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2025
CVE-2025-8028 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Large branch table could lead to truncated instruction
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1332
Not analysed yet 22 Jul 2025
CVE-2025-8027 CVE record

CVSS 6.5 Medium

JavaScript engine only wrote partial return value to stack
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Jul 2025
CVE-2025-6436 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 24 Jun 2025
CVE-2025-6435 CVE record

CVSS 8.1 High

Save as in Devtools could download files without sanitizing the extension
- Mozilla Firefox
- Mozilla Thunderbird
- Unrestricted file upload
Not analysed yet 24 Jun 2025
CVE-2025-6434 CVE record

CVSS 4.3 Medium

HTTPS-Only exception screen lacked anti-clickjacking delay
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 24 Jun 2025
CVE-2025-6433 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate
- Mozilla Firefox
- Mozilla Thunderbird
- Weak cryptography or TLS
Not analysed yet 24 Jun 2025
CVE-2025-6432 CVE record

CVSS 8.6 High

DNS Requests leaked outside of a configured SOCKS proxy
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 24 Jun 2025
CVE-2025-6427 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

connect-src Content Security Policy restriction could be bypassed
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 24 Jun 2025
CVE-2025-6430 CVE record

CVSS 6.1 Medium

Content-Disposition header ignored when a file is included in an embed or object tag
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 24 Jun 2025
CVE-2025-6429 CVE record

CVSS 6.5 Medium

Incorrect parsing of URLs could have allowed embedding of youtube.com
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 24 Jun 2025
CVE-2025-6426 CVE record

CVSS 8.8 High

No warning when opening executable terminal files on macOS
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-345
Not analysed yet 24 Jun 2025
CVE-2025-6425 CVE record

CVSS 4.3 Medium

The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 24 Jun 2025
CVE-2025-6424 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use-after-free in FontFaceSet
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 24 Jun 2025
CVE-2025-5986 CVE record

CVSS 6.5 Medium

Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links
- Mozilla Thunderbird
- CWE-451
Not analysed yet 11 Jun 2025
CVE-2025-5272 CVE record

CVSS 7.3 High

Memory safety bugs fixed in Firefox 139 and Thunderbird 139
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-5271 CVE record

CVSS 6.5 Medium

Devtools' preview ignored CSP headers
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 27 May 2025
CVE-2025-5270 CVE record

CVSS 7.5 High

SNI was sometimes unencrypted
- Mozilla Firefox
- Mozilla Thunderbird
- Weak cryptography or TLS
Not analysed yet 27 May 2025
CVE-2025-5269 CVE record

CVSS 8.1 High

Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-5268 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025