Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-14965.5 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 Critical
- mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2014-20184.3 Medium
- mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2013-6674Public exploit4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...CVE-2014-1491Fix available4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...CVE-2014-1490Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3,...CVE-2014-14877.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0,...CVE-2014-14869.8 Critical
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreRasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before...CVE-2014-14828.8 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey...CVE-2014-14817.5 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x...CVE-2014-14797.5 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0,...CVE-2014-14779.8 Critical
- mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey...CVE-2013-66735.9 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before...CVE-2013-6671EPSS 11.1%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user...CVE-2013-5618EPSS 10.4%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in...CVE-2013-56169.8 Critical
- mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,...CVE-2013-56159.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox...CVE-2013-56139.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0,...CVE-2013-56099.8 Critical
- google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 moreThe get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used...CVE-2013-6629Fix available5.0 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0,...CVE-2013-56049.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function...CVE-2013-560310.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before...CVE-2013-560210.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla...CVE-2013-560110.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in...CVE-2013-560010.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka...CVE-2013-559910.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox...CVE-2013-559710.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before...CVE-2013-55966.8 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x...CVE-2013-55954.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,...CVE-2013-55934.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x...CVE-2013-559110.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0,...CVE-2013-559010.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0,...CVE-2015-0836Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreHeap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0,...CVE-2015-0827Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and...CVE-2015-0822Fix available4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before...CVE-2013-17389.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and...CVE-2013-17284.3 Medium
- Show moreLoading…