Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...CVE-2017-5380Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...CVE-2017-5378Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...CVE-2017-5376Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...CVE-2017-5375Public exploitFix availableEPSS 34.1%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...CVE-2017-5373Fix available9.8 Critical
- libevent project libevent, debian linux, mozilla firefox +1 more +3 moreStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...CVE-2016-10196Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...CVE-2016-9905Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...CVE-2016-9904Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...CVE-2016-9900Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...CVE-2016-9899Public exploitFix availableEPSS 19.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...CVE-2016-9898Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...CVE-2016-9895Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...CVE-2016-9893Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Updater can be made to choose an arbitrary target working directory for output files...CVE-2016-52945.5 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...CVE-2016-9079In KEVPublic exploitFix availableEPSS 87.4%7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...CVE-2016-9074Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...CVE-2016-9066Public exploitFix availableEPSS 12.0%7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn error in argument length checking in JavaScript, leading to potential integer overflows or...CVE-2016-5297Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...CVE-2016-5296Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....CVE-2016-5291Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...CVE-2016-5290Fix available9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...CVE-2016-1966Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...CVE-2016-1960Public exploitFix availableEPSS 30.9%8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1957Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...CVE-2016-1954Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow...CVE-2016-1953Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...CVE-2016-1952Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1526Fix available8.1 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1523Fix available6.5 Medium
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreCode.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox...CVE-2016-1522Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1521Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...CVE-2015-2713Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...CVE-2015-2710Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...CVE-2015-2708Fix available7.5 High
- Show moreLoading…