Skip to content
Mozilla Thunderbird Esr vulnerabilities
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Plaintext of decrypted emails can leak through by user submitting an embedded form. This...
CVE-2018-5185
Fix available
6.5 Medium
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 more
Using remote content in encrypted messages can lead to the disclosure of plaintext. This...
CVE-2018-5184
Fix available
7.5 High
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
It is possible to spoof the filename of an attachment and display an arbitrary attachment name....
CVE-2018-5170
Fix available
4.3 Medium
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This...
CVE-2018-5162
Fix available
7.5 High
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This...
CVE-2018-5161
Fix available
4.3 Medium
-
mozilla firefox, firefox esr, thunderbird +1 more +3 more
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...
CVE-2018-5174
7.5 High
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Mozilla developers backported selected changes in the Skia library. These changes correct memory...
CVE-2018-5183
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...
CVE-2018-5178
Fix available
8.1 High
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Sites can bypass security checks on permissions to install lightweight themes by manipulating the...
CVE-2018-5168
Fix available
5.3 Medium
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without...
CVE-2018-5159
Public exploitFix available
EPSS 20.6%
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text...
CVE-2018-5155
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with...
CVE-2018-5154
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...
CVE-2018-5150
Fix available
9.8 Critical