Advisories · Technology
Mozilla Thunderbird.
Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Improper authorization in Mozilla Thunderbird
- Mozilla Thunderbird
- Broken access control
- CVSS 6.1 Medium
Open redirect in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Open redirect
- CVSS 6.1 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
- CVSS 8.8 High
Incorrect default permissions in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Broken access control
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 5.4 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-1021
- CVSS 6.5 Medium
Out-of-bounds read in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+KEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
- CVSS 6.5 Medium
Insecure temporary file in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-377
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693
- CVSS 4.3 Medium
Mozilla Firefox: When resizing a popup after requesting fullscreen access…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CVSS 8.8 High
Race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 8.8 High
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 6.5 Medium
Sensitive information in error messages in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Code injection
- CVSS 6.5 Medium
Incorrect authorization in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
- CVSS 7.1 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Improper certificate validation in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Weak cryptography or TLS
- CVSS 5.9 Medium
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 6.5 Medium
Information disclosure in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Information disclosure
- CVSS 8.8 High
Improper output encoding in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-116
- CVSS 4.3 Medium
Mozilla Firefox ESR: When navigating from inside an iframe while requesting fullscreen access…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 6.5 Medium
Out-of-bounds read in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 7.5 High
Mozilla Firefox ESR: When resizing a popup while requesting fullscreen access…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 8.8 High
Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox ESR: Malicious websites could have tricked users into accepting launching a program to handle…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 7.5 High
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 6.5 Medium
Authentication bypass by replay in Mozilla Thunderbird
- Mozilla Thunderbird
- Authentication bypass
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Prototype pollution
- CVSS 6.5 Medium
Improper certificate validation in Mozilla Thunderbird
- Mozilla Thunderbird
- Weak cryptography or TLS
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
- CVSS 4.3 Medium
Origin validation error in Mozilla Thunderbird
- Mozilla Thunderbird
- CWE-346
- CVSS 5.4 Medium
Improper certificate validation in Mozilla Thunderbird
- Mozilla Thunderbird
- Weak cryptography or TLS
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird
- Mozilla Thunderbird
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
XML injection in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Mozilla Thunderbird: An out of date graphics library (Angle) likely contained vulnerabilities that could…
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CVSS 6.5 Medium
Mozilla Thunderbird: When receiving an OpenPGP/MIME signed email message that contains an additional outer…
- Mozilla Thunderbird
- CVSS 8.8 High
Command injection in Mozilla Thunderbird
- Mozilla Thunderbird
- Command injection
-
Mozilla Firefox: The iframe sandbox rules were not correctly applied to XSLT stylesheets…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When interacting with an HTML input element's file picker dialog with webkitdirectory…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Through a series of navigations, Firefox could have entered fullscreen mode without…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By displaying a form validity message in the correct location at the same time as a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Due to an unusual sequence of attacker-controlled events…
- Mozilla Firefox
- Mozilla Thunderbird