Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-46878 CVE record

CVSS 8.8 High

Mozilla Firefox: Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 22 Dec 2022
CVE-2022-46875 CVE record

CVSS 6.5 Medium

Improper authentication in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
Not analysed yet 22 Dec 2022
CVE-2022-46874 CVE record

CVSS 8.8 High

Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Code injection
Not analysed yet 22 Dec 2022
CVE-2022-46872 CVE record

CVSS 8.6 High

Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-45421 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-45420 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-45418 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-45416 CVE record

CVSS 6.5 Medium

Observable discrepancy in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-45414 CVE record

CVSS 8.1 High

Information disclosure in Mozilla Thunderbird
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-45412 CVE record

CVSS 8.8 High

Symlink following in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Path traversal
Not analysed yet 22 Dec 2022
CVE-2022-45411 CVE record

CVSS 6.1 Medium

Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Dec 2022
CVE-2022-45410 CVE record

CVSS 6.5 Medium

Missing authorization in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Broken access control
Not analysed yet 22 Dec 2022
CVE-2022-45409 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-45408 CVE record

CVSS 6.5 Medium

Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Dec 2022
CVE-2022-45406 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-45405 CVE record

CVSS 6.5 Medium

Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-45404 CVE record

CVSS 6.5 Medium

Mozilla Firefox ESR: Through a series of popup and <code>window.print()</code> calls…
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-451
Not analysed yet 22 Dec 2022
CVE-2022-45403 CVE record

CVSS 6.5 Medium

Observable discrepancy in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-42932 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-42929 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
Not analysed yet 22 Dec 2022
CVE-2022-42928 CVE record

CVSS 8.8 High

NULL pointer dereference in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-42927 CVE record

CVSS 8.1 High

Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
Not analysed yet 22 Dec 2022
CVE-2022-40962 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-40960 CVE record

CVSS 6.5 Medium

Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-40959 CVE record

CVSS 6.5 Medium

Insecure storage of sensitive information in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-40958 CVE record

CVSS 6.5 Medium

Injection in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Other injection
Not analysed yet 22 Dec 2022
CVE-2022-40957 CVE record

CVSS 6.5 Medium

Mozilla Firefox ESR: Inconsistent data in instruction and data cache when creating wasm code could lead to a…
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-240
Not analysed yet 22 Dec 2022
CVE-2022-40956 CVE record

CVSS 6.1 Medium

Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Dec 2022
CVE-2022-38478 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-38477 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-38476 CVE record

CVSS 7.5 High

Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-38473 CVE record

CVSS 8.8 High

Mozilla Thunderbird: A cross-origin iframe referencing an XSLT document would inherit the parent domain's…
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-281
Not analysed yet 22 Dec 2022
CVE-2022-38472 CVE record

CVSS 6.5 Medium

Origin validation error in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-346
Not analysed yet 22 Dec 2022
CVE-2022-36319 CVE record

CVSS 7.5 High

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-36318 CVE record

CVSS 5.3 Medium

Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
Not analysed yet 22 Dec 2022
CVE-2022-36314 CVE record

CVSS 5.5 Medium

Uncontrolled search path in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-427
Not analysed yet 22 Dec 2022
CVE-2022-34484 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-34481 CVE record

CVSS 8.8 High

Integer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-34479 CVE record

CVSS 6.5 Medium

Mozilla Firefox: A malicious website that could create a popup could have resized the popup to overlay the…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
Not analysed yet 22 Dec 2022
CVE-2022-34478 CVE record

CVSS 6.5 Medium

Open redirect in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Open redirect
Not analysed yet 22 Dec 2022
CVE-2022-34472 CVE record

CVSS 4.3 Medium

Mozilla Firefox: If there was a PAC URL set and the server that hosts the PAC was not reachable…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-703
Not analysed yet 22 Dec 2022
CVE-2022-34470 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-34468 CVE record

CVSS 8.8 High

Mozilla Firefox: An iframe that was not permitted to run scripts could do so if the user clicked on a…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-829
Not analysed yet 22 Dec 2022
CVE-2022-3266 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-31747 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-31744 CVE record

CVSS 6.5 Medium

Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Dec 2022
CVE-2022-31742 CVE record

CVSS 6.5 Medium

Observable discrepancy in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-31741 CVE record

CVSS 8.8 High

Use of uninitialized resource in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-31740 CVE record

CVSS 8.8 High

Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-31739 CVE record

CVSS 8.8 High

External control of a file path in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Path traversal
Not analysed yet 22 Dec 2022
CVE-2022-31738 CVE record

CVSS 6.5 Medium

Authentication bypass by spoofing in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Authentication bypass
Not analysed yet 22 Dec 2022
CVE-2022-31737 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-31736 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Mozilla Thunderbird: A malicious website could have learned the size of a cross-origin resource that supported…
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-942
Not analysed yet 22 Dec 2022
CVE-2022-3155 CVE record

CVSS 7.8 High

Incorrect default permissions in Mozilla Thunderbird
- Mozilla Thunderbird
- Broken access control
Not analysed yet 22 Dec 2022
CVE-2022-3034 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Thunderbird
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-3033 CVE record

CVSS 8.1 High

Cross-site scripting in Mozilla Thunderbird
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 22 Dec 2022
CVE-2022-3032 CVE record

Mozilla Thunderbird: When receiving an HTML email that contained an <code>iframe</code> element…
- Mozilla Thunderbird
Not analysed yet 22 Dec 2022
CVE-2022-29917 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 22 Dec 2022
CVE-2022-29916 CVE record

CVSS 6.5 Medium

Information disclosure in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Information disclosure
Not analysed yet 22 Dec 2022
CVE-2022-29914 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 22 Dec 2022