agentprime: mozilla-thunderbird

agentprime: mozilla-thunderbirdEvery new CVE for mozilla-thunderbird.https://agentprime.io/CVE-2026-118180: Matrix homeserver could redirect the chat session to a local file or network sharehttps://agentprime.io/advisories/CVE-2026-118180/https://agentprime.io/advisories/CVE-2026-118180/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:33 GMTCVECVE-2026-118179: Request forgery via news: linkshttps://agentprime.io/advisories/CVE-2026-118179/https://agentprime.io/advisories/CVE-2026-118179/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:32 GMTCVECVE-2026-118178: RSS feed could redirect its subscription to a local file or network sharehttps://agentprime.io/advisories/CVE-2026-118178/https://agentprime.io/advisories/CVE-2026-118178/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:31 GMTCVECVE-2026-118177: Calendar discovery accepted local file and remote network share locationshttps://agentprime.io/advisories/CVE-2026-118177/https://agentprime.io/advisories/CVE-2026-118177/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:31 GMTCVEcriticalCVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLshttps://agentprime.io/advisories/CVE-2026-118176/https://agentprime.io/advisories/CVE-2026-118176/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:30 GMTCVECVE-2026-118175: Content of other messages could be included when replying to a crafted messagehttps://agentprime.io/advisories/CVE-2026-118175/https://agentprime.io/advisories/CVE-2026-118175/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:29 GMTCVECVE-2026-118174: Displaying a message could load an attacker-chosen URL through an OpenPGP key attachmenthttps://agentprime.io/advisories/CVE-2026-118174/https://agentprime.io/advisories/CVE-2026-118174/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 18:16:28 GMTCVECVE-2026-118026: Invalid pointer in the JavaScript: GC componenthttps://agentprime.io/advisories/CVE-2026-118026/https://agentprime.io/advisories/CVE-2026-118026/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:05 GMTCVECVE-2026-118025: Other issue in the SVG componenthttps://agentprime.io/advisories/CVE-2026-118025/https://agentprime.io/advisories/CVE-2026-118025/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:05 GMTCVECVE-2026-118024: Use-after-free in the Graphics: Text componenthttps://agentprime.io/advisories/CVE-2026-118024/https://agentprime.io/advisories/CVE-2026-118024/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:05 GMTCVECVE-2026-118023: Sandbox escape due to use-after-free in the Graphics: WebRender componenthttps://agentprime.io/advisories/CVE-2026-118023/https://agentprime.io/advisories/CVE-2026-118023/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:04 GMTCVECVE-2026-118022: Sandbox escape due to use-after-free in the Disability Access APIs componenthttps://agentprime.io/advisories/CVE-2026-118022/https://agentprime.io/advisories/CVE-2026-118022/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:04 GMTCVECVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM componenthttps://agentprime.io/advisories/CVE-2026-118021/https://agentprime.io/advisories/CVE-2026-118021/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:04 GMTCVECVE-2026-118020: Use-after-free in the Layout componenthttps://agentprime.io/advisories/CVE-2026-118020/https://agentprime.io/advisories/CVE-2026-118020/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:03 GMTCVECVE-2026-118019: Race condition, use-after-free in the DOM: File componenthttps://agentprime.io/advisories/CVE-2026-118019/https://agentprime.io/advisories/CVE-2026-118019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:03 GMTCVECVE-2026-118017: Use-after-free in the SVG componenthttps://agentprime.io/advisories/CVE-2026-118017/https://agentprime.io/advisories/CVE-2026-118017/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:02 GMTCVECVE-2026-118016: Use-after-free in the DOM: Core & HTML componenthttps://agentprime.io/advisories/CVE-2026-118016/https://agentprime.io/advisories/CVE-2026-118016/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:02 GMTCVECVE-2026-118015: Use-after-free in the DOM: Core & HTML componenthttps://agentprime.io/advisories/CVE-2026-118015/https://agentprime.io/advisories/CVE-2026-118015/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:01 GMTCVECVE-2026-118014: Use-after-free in the JavaScript Engine: JIT componenthttps://agentprime.io/advisories/CVE-2026-118014/https://agentprime.io/advisories/CVE-2026-118014/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:01 GMTCVECVE-2026-118013: Use-after-free in the Layout: Images, Video, and HTML Frames componenthttps://agentprime.io/advisories/CVE-2026-118013/https://agentprime.io/advisories/CVE-2026-118013/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:01 GMTCVECVE-2026-118012: Use-after-free in the DOM: Animation componenthttps://agentprime.io/advisories/CVE-2026-118012/https://agentprime.io/advisories/CVE-2026-118012/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:00 GMTCVECVE-2026-118011: Frame poisoning in the CSS Parsing and Computation componenthttps://agentprime.io/advisories/CVE-2026-118011/https://agentprime.io/advisories/CVE-2026-118011/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:00 GMTCVECVE-2026-118010: Use-after-free in the Disability Access APIs componenthttps://agentprime.io/advisories/CVE-2026-118010/https://agentprime.io/advisories/CVE-2026-118010/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:06:00 GMTCVECVE-2026-118009: Integer overflow, use-after-free in the Graphics: Text componenthttps://agentprime.io/advisories/CVE-2026-118009/https://agentprime.io/advisories/CVE-2026-118009/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:59 GMTCVECVE-2026-118008: Privilege escalation in the DOM: Navigation componenthttps://agentprime.io/advisories/CVE-2026-118008/https://agentprime.io/advisories/CVE-2026-118008/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:59 GMTCVECVE-2026-118007: Use-after-free in the JavaScript: GC componenthttps://agentprime.io/advisories/CVE-2026-118007/https://agentprime.io/advisories/CVE-2026-118007/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:59 GMTCVECVE-2026-118006: Privilege escalation due to use-after-free in the WebRTC: Signaling componenthttps://agentprime.io/advisories/CVE-2026-118006/https://agentprime.io/advisories/CVE-2026-118006/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:58 GMTCVECVE-2026-118005: Use-after-free in the WebRTC: Signaling componenthttps://agentprime.io/advisories/CVE-2026-118005/https://agentprime.io/advisories/CVE-2026-118005/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:58 GMTCVECVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations componenthttps://agentprime.io/advisories/CVE-2026-118004/https://agentprime.io/advisories/CVE-2026-118004/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:57 GMTCVECVE-2026-118003: Information disclosure in the Networking: DNS componenthttps://agentprime.io/advisories/CVE-2026-118003/https://agentprime.io/advisories/CVE-2026-118003/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:56 GMTCVECVE-2026-118002: Information disclosure due to race condition in the Networking componenthttps://agentprime.io/advisories/CVE-2026-118002/https://agentprime.io/advisories/CVE-2026-118002/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:56 GMTCVECVE-2026-118000: Information disclosure in the Networking: HTTP componenthttps://agentprime.io/advisories/CVE-2026-118000/https://agentprime.io/advisories/CVE-2026-118000/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:55 GMTCVECVE-2026-117999: Race condition in the IPC componenthttps://agentprime.io/advisories/CVE-2026-117999/https://agentprime.io/advisories/CVE-2026-117999/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:55 GMTCVECVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions componenthttps://agentprime.io/advisories/CVE-2026-117998/https://agentprime.io/advisories/CVE-2026-117998/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:55 GMTCVECVE-2026-117997: Sandbox escape due to use-after-free in the Widget componenthttps://agentprime.io/advisories/CVE-2026-117997/https://agentprime.io/advisories/CVE-2026-117997/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:54 GMTCVEcriticalCVE-2026-117996: Incorrect boundary conditions in the WebRTC componenthttps://agentprime.io/advisories/CVE-2026-117996/https://agentprime.io/advisories/CVE-2026-117996/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:54 GMTCVECVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling componenthttps://agentprime.io/advisories/CVE-2026-117995/https://agentprime.io/advisories/CVE-2026-117995/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:54 GMTCVECVE-2026-117994: Use-after-free in the JavaScript: GC componenthttps://agentprime.io/advisories/CVE-2026-117994/https://agentprime.io/advisories/CVE-2026-117994/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:53 GMTCVECVE-2026-117993: Integer overflow in the Graphics: Text componenthttps://agentprime.io/advisories/CVE-2026-117993/https://agentprime.io/advisories/CVE-2026-117993/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:53 GMTCVECVE-2026-117992: Information disclosure in the CSS Parsing and Computation componenthttps://agentprime.io/advisories/CVE-2026-117992/https://agentprime.io/advisories/CVE-2026-117992/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:53 GMTCVECVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts componenthttps://agentprime.io/advisories/CVE-2026-117991/https://agentprime.io/advisories/CVE-2026-117991/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:52 GMTCVECVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componenthttps://agentprime.io/advisories/CVE-2026-117990/https://agentprime.io/advisories/CVE-2026-117990/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:52 GMTCVEcriticalCVE-2026-117989: Use-after-free in the Graphics componenthttps://agentprime.io/advisories/CVE-2026-117989/https://agentprime.io/advisories/CVE-2026-117989/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:51 GMTCVECVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componenthttps://agentprime.io/advisories/CVE-2026-117988/https://agentprime.io/advisories/CVE-2026-117988/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:51 GMTCVEcriticalCVE-2026-117987: Use-after-free in the Graphics componenthttps://agentprime.io/advisories/CVE-2026-117987/https://agentprime.io/advisories/CVE-2026-117987/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:51 GMTCVECVE-2026-117986: Use-after-free in the Graphics componenthttps://agentprime.io/advisories/CVE-2026-117986/https://agentprime.io/advisories/CVE-2026-117986/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:50 GMTCVECVE-2026-117985: Sandbox escape due to use-after-free in the Graphics componenthttps://agentprime.io/advisories/CVE-2026-117985/https://agentprime.io/advisories/CVE-2026-117985/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:50 GMTCVEcriticalCVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow componenthttps://agentprime.io/advisories/CVE-2026-117984/https://agentprime.io/advisories/CVE-2026-117984/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:50 GMTCVECVE-2026-117983: Use-after-free in the Graphics componenthttps://agentprime.io/advisories/CVE-2026-117983/https://agentprime.io/advisories/CVE-2026-117983/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:49 GMTCVECVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT componenthttps://agentprime.io/advisories/CVE-2026-117982/https://agentprime.io/advisories/CVE-2026-117982/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 14:05:48 GMTCVEcritical