Skip to contentMozilla Thunderbird vulnerabilities
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...CVE-2018-12374Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...CVE-2018-12373Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...CVE-2018-12372Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...CVE-2018-5187Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...CVE-2018-12371Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIn the previous mitigations for Spectre, the resolution or precision of various methods was...CVE-2018-12367Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...CVE-2018-12361Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...CVE-2018-5185Fix available6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...CVE-2018-5184Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....CVE-2018-5170Fix available4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...CVE-2018-5162Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...CVE-2018-5161Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...CVE-2018-51747.5 High
- 9folders nine, apple mail, bloop airmail +14 more +16 moreThe S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can...CVE-2017-17689Fix available5.9 Medium
- apple mail, bloop airmail, emclient +8 more +10 more** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget...CVE-2017-17688Fix availableDisputed5.9 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...CVE-2018-5145Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...CVE-2018-5144Fix available7.3 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...CVE-2018-5129Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...CVE-2018-5127Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...CVE-2018-5125Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while editing events in form elements on a page,...CVE-2018-5096Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...CVE-2018-5117Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during font face manipulation when a font face is freed...CVE-2018-5104Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during mouse event handling due to issues with...CVE-2018-5103Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...CVE-2018-5102Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when the widget listener is holding strong references to...CVE-2018-5099Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when form input elements, focus, and selections are...CVE-2018-5098Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during XSL transformations when the source document for...CVE-2018-5097Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...CVE-2018-5095Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...CVE-2018-5089Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE...CVE-2017-78458.8 High
- mozilla firefox, thunderbird +1 moreThe Gecko Media Plugin sandbox allows access to local files that match specific regular...CVE-2017-54257.5 High
- mozilla firefox, thunderbird +1 moreA use-after-free can occur during buffer storage operations within the ANGLE graphics library,...CVE-2017-54117.5 High
- Show moreLoading…