Advisories · Technology
Mozilla Thunderbird.
Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox: The executable file warning was not presented when downloading .inetloc files, which…
- Mozilla Firefox
- Mozilla Thunderbird
-
Thunderbird unexpectedly enabled JavaScript in the composition area.
- Mozilla Thunderbird
-
Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A use-after-free could have occured when an HTTP2 session object was released on a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Under certain circumstances, asynchronous functions could have caused a navigation to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: By misusing a race in our notification code…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Failure to correctly record the location of live pointers across wasm instance calls…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: When invoking protocol handlers for external protocols…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Using XMLHttpRequest, an attacker could have identified installed applications by probing…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Using the Location API in a loop could have caused severe application hangs and crashes.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: It was possible to recreate previous cursor spoofing attacks against users with a zoomed…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When delegating navigations to the operating system…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13.
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: During operations on MessageTasks, a task may have been removed while it was still…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: Through use of reportValidity() and window.open()…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: During process shutdown, a document could have caused a use-after-free of a languages…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
- Mozilla Firefox
- Mozilla Thunderbird
-
Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection.
- Mozilla Thunderbird
-
Mozilla Thunderbird: Uninitialized memory in a canvas object could have caused an incorrect free() leading to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: An issue present in lowering/register allocation could have led to obscure but…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Instruction reordering resulted in a sequence of instructions that would cause an object…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability in media channels could have led to memory corruption and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A suspected race condition when calling getaddrinfo led to memory corruption and a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: After requesting multiple permissions, and closing the first permission panel…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Firefox incorrectly treated an inline list-item element as a block element…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: If Thunderbird was configured to use STARTTLS for an IMAP connection…
- Mozilla Thunderbird
-
Mozilla Thunderbird: A malicious webpage could have triggered a use-after-free, memory corruption…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Mozilla developers reported memory safety bugs present in code shared between Firefox and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: If a Thunderbird user has previously imported Alice's OpenPGP key…
- Mozilla Thunderbird
-
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature.
- Mozilla Thunderbird
-
Mozilla Thunderbird: An attacker may perform a DoS attack to prevent a user from sending encrypted email to a…
- Mozilla Thunderbird
-
Mozilla Firefox ESR: A WebGL framebuffer was not initialized early enough…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
When Responsive Design Mode was enabled, it used references to objects that were previously freed.
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: Through complicated navigations with new windows…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: If a Blob URL was loaded through some unusual user interaction…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D)…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: The WebAssembly JIT could miscalculate the size of a return type…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: Ports that were written as an integer overflow above the bounds of a 16-bit integer could…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Thunderbird: Signatures are written to disk before and read during verification…
- Mozilla Thunderbird
-
Mozilla Thunderbird: When loading the shared library that provides the OTR protocol implementation…
- Mozilla Thunderbird
-
Mozilla Thunderbird: Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption…
- Mozilla Thunderbird
-
Mozilla Thunderbird: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Thunderbird: OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version…
- Mozilla Thunderbird
-
Mozilla Thunderbird: If a MIME encoded email contains an OpenPGP inline signed or encrypted message part…
- Mozilla Thunderbird
-
Mozilla Thunderbird: A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox ESR: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: Using techniques that built on the slipstream research…
- Mozilla Firefox ESR
- Mozilla Firefox
-
A malicious extension could have opened a popup window lacking an address bar.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If a user clicked into a specifically crafted PDF…
- Mozilla Firefox
- Mozilla Thunderbird