Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-6819 CVE record

CVSS 8.1 HighCritical · KEVKEV

Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
Not analysed yet 24 Apr 2020
CVE-2020-6820 CVE record

CVSS 8.1 HighCritical · KEVKEV

Race condition in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Race condition
Not analysed yet 24 Apr 2020
CVE-2020-6821 CVE record

Mozilla Thunderbird: When reading from areas partially or fully outside the source resource with WebGL's…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 24 Apr 2020
CVE-2020-6822 CVE record

Mozilla Thunderbird: On 32-bit builds, an out of bounds write could have occurred when processing an image…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 24 Apr 2020
CVE-2020-6825 CVE record

Mozilla Thunderbird: Mozilla developers and community members Tyson Smith and Christian Holler reported memory…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 24 Apr 2020
CVE-2020-6805 CVE record

Mozilla Thunderbird: When removing data about an origin whose tab was recently closed…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6806 CVE record

Mozilla Thunderbird: By carefully crafting promise resolutions…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6807 CVE record

Mozilla Thunderbird: When a device was changed while a stream was about to be destroyed…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6811 CVE record

Mozilla Thunderbird: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6812 CVE record

Mozilla Thunderbird: The first time AirPods are connected to an iPhone…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6814 CVE record

Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5.
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 25 Mar 2020
CVE-2020-6800 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 2 Mar 2020
CVE-2020-6798 CVE record

Mozilla Thunderbird: If a template tag was used in a select tag…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 2 Mar 2020
CVE-2020-6797 CVE record

Mozilla Thunderbird: By downloading a file with the .fileloc extension…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 2 Mar 2020
CVE-2020-6795 CVE record

Mozilla Thunderbird: When processing a message that contains multiple S/MIME signatures…
- Mozilla Thunderbird
Not analysed yet 2 Mar 2020
CVE-2020-6794 CVE record

Mozilla Thunderbird: If a user saved passwords before Thunderbird 60 and then later set a master password…
- Mozilla Thunderbird
Not analysed yet 2 Mar 2020
CVE-2020-6793 CVE record

Mozilla Thunderbird: When processing an email message with an ill-formed envelope…
- Mozilla Thunderbird
Not analysed yet 2 Mar 2020
CVE-2020-6792 CVE record

Mozilla Thunderbird: When deriving an identifier for an email message…
- Mozilla Thunderbird
Not analysed yet 2 Mar 2020
CVE-2019-17026 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 2 Mar 2020
CVE-2019-17012 CVE record

Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17011 CVE record

Mozilla Thunderbird: Under certain conditions, when retrieving a document from a DocShell in the antitracking…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17010 CVE record

Mozilla Thunderbird: Under certain conditions, when checking the Resist Fingerprinting preference during…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17009 CVE record

Mozilla Thunderbird: When running, the updater service wrote status and log files to an unrestricted location…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17008 CVE record

When using nested workers, a use-after-free could occur during worker destruction.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17005 CVE record

Mozilla Thunderbird: The plain text serializer used a fixed-size array for the number of <ol> elements it…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-11764 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11763 CVE record

Mozilla Firefox: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11762 CVE record

Mozilla Firefox: If two same-origin documents set document.domain differently to become cross-origin…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11761 CVE record

Mozilla Firefox: By using a form with a data URI it was possible to gain access to the privileged JSONView…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11760 CVE record

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11759 CVE record

Mozilla Firefox: An attacker could have caused 4 bytes of HMAC output to be written past the end of a…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11758 CVE record

Mozilla Firefox: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11757 CVE record

Mozilla Firefox: When following the value's prototype chain…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11745 CVE record

Mozilla Thunderbird: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-11739 CVE record

Mozilla Thunderbird: Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when…
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11740 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11742 CVE record

Mozilla Firefox: A same-origin policy violation occurs allowing the theft of cross-origin images through a…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11743 CVE record

Mozilla Firefox: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11744 CVE record

Mozilla Firefox: Some HTML elements, such as <title> and <textarea&gt…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11746 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur while manipulating video elements if the body is…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11752 CVE record

Mozilla Firefox: It is possible to delete an IndexedDB key value and subsequently try to extract it during…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11755 CVE record

Mozilla Thunderbird: A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData…
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-9800 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9811 CVE record

Mozilla Firefox ESR: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9815 CVE record

Mozilla Thunderbird: If hyperthreading is not disabled, a timing attack vulnerability exists…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9816 CVE record

Mozilla Thunderbird: A possible vulnerability exists where type confusion can occur when manipulating…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9817 CVE record

Images from a different domain can be read using a canvas object in some circumstances.
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9818 CVE record

Mozilla Thunderbird: A race condition is present in the crash generation server used to generate data for the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9819 CVE record

Mozilla Thunderbird: A vulnerability where a JavaScript compartment mismatch can occur while working with the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9820 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur in the chrome event handler when it is freed…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11691 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11692 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when listeners are removed from the event…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11693 CVE record

Mozilla Thunderbird: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11694 CVE record

Mozilla Thunderbird: A vulnerability exists in the Windows sandbox where an uninitialized value in memory can…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11698 CVE record

Mozilla Thunderbird: If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11703 CVE record

Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in…
- Mozilla Thunderbird
Not analysed yet 23 Jul 2019
CVE-2019-11704 CVE record

Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in…
- Mozilla Thunderbird
Not analysed yet 23 Jul 2019
CVE-2019-11705 CVE record

Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in…
- Mozilla Thunderbird
Not analysed yet 23 Jul 2019
CVE-2019-11706 CVE record

Mozilla Thunderbird: A flaw in Thunderbird's implementation of iCal causes a type confusion in…
- Mozilla Thunderbird
Not analysed yet 23 Jul 2019
CVE-2019-11707 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
Not analysed yet 23 Jul 2019