Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...CVE-2017-5465Public exploitFix availableEPSS 18.2%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...CVE-2017-5464Fix available9.8 Critical
- mozilla firefox, firefox esr, network security services +2 more +4 moreA flaw in DRBG number generation within the Network Security Services (NSS) library where the...CVE-2017-5462Fix available5.3 Medium
- mozilla network security services, firefox, firefox esr +1 more +3 moreMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...CVE-2017-5461Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in frame selection triggered by a combination of malicious script...CVE-2017-5460Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...CVE-2017-5459Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to bypass file system access protections in the sandbox to use the file picker to...CVE-2017-5454Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...CVE-2017-5451Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...CVE-2017-5449Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...CVE-2017-5447Public exploitFix availableEPSS 17.0%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...CVE-2017-5446Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...CVE-2017-5445Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow vulnerability while parsing "application/http-index-format" format content when...CVE-2017-5444Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....CVE-2017-5443Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during changes in style when manipulating DOM elements. This...CVE-2017-5442Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when holding a selection during scroll events. This results in a...CVE-2017-5441Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to a failure to propagate error...CVE-2017-5440Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...CVE-2017-5439Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to the result handler being held by a...CVE-2017-5438Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...CVE-2017-5436Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during transaction processing in the editor during design...CVE-2017-5435Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA use-after-free vulnerability occurs when redirecting focus handling which results in a...CVE-2017-5434Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...CVE-2017-5433Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during certain text input selection resulting in a...CVE-2017-5432Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...CVE-2017-5430Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...CVE-2017-5429Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...CVE-2017-5426Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...CVE-2017-5422Fix available7.5 High
- mozilla firefox, thunderbird +1 moreA malicious site could spoof the contents of the print preview window if popup windows are...CVE-2017-5421Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...CVE-2017-5419Fix available7.5 High
- mozilla firefox, thunderbird +1 moreAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...CVE-2017-5418Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIn certain circumstances a networking event listener can be prematurely released. This appears to...CVE-2017-5416Fix available7.5 High
- mozilla firefox, thunderbird +1 moreThe file picker dialog can choose and display the wrong local default directory when instantiated...CVE-2017-5414Fix available5.5 Medium
- mozilla firefox, thunderbird +1 moreA segmentation fault can occur during some bidirectional layout operations. This vulnerability...CVE-2017-5413Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...CVE-2017-5412Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory corruption resulting in a potentially exploitable crash during garbage collection of...CVE-2017-5410Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreVideo files loaded video captions cross-origin without checking for the presence of CORS headers...CVE-2017-5408Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...CVE-2017-5407Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreA segmentation fault can occur in the Skia graphics library during some canvas operations due to...CVE-2017-5406Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreCertain response codes in FTP connections can result in the use of uninitialized values for ports...CVE-2017-5405Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free error can occur when manipulating ranges in selections with one node inside a...CVE-2017-5404Public exploitFix availableEPSS 16.9%9.8 Critical
- mozilla firefox, thunderbird +1 moreWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...CVE-2017-5403Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free can occur when events are fired for a "FontFace" object after the object has...CVE-2017-5402Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...CVE-2017-5401Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...CVE-2017-5400Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...CVE-2017-5399Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...CVE-2017-5398Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in the Media Decoder when working with media files when some...CVE-2017-5396Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...CVE-2017-5390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...CVE-2017-5383Fix available5.3 Medium
- Show moreLoading…