Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...CVE-2020-6812Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-6811Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...CVE-2020-6807Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...CVE-2020-6806Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...CVE-2020-6805Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...CVE-2020-6797Fix available4.3 Medium
- mozilla thunderbirdWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...CVE-2020-6795Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...CVE-2020-6794Fix available6.5 Medium
- mozilla thunderbirdWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...CVE-2020-6793Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...CVE-2020-6792Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...CVE-2020-6800Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...CVE-2020-6798Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...CVE-2019-17026In KEVPublic exploitFix availableEPSS 46.3%8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen running, the updater service wrote status and log files to an unrestricted location;...CVE-2019-17009Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...CVE-2019-17008Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe plain text serializer used a fixed-size array for the number of <ol> elements it could...CVE-2019-17005Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...CVE-2019-11745Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...CVE-2019-11758Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 69 and...CVE-2019-11764Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...CVE-2019-11763Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf two same-origin documents set document.domain differently to become cross-origin, it was...CVE-2019-11762Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy using a form with a data URI it was possible to gain access to the privileged JSONView object...CVE-2019-11761Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...CVE-2019-11760Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...CVE-2019-11759Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen following the value's prototype chain, it was possible to retain a reference to a locale,...CVE-2019-11757Fix available8.8 High
- mozilla thunderbirdA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...CVE-2019-11755Fix available7.5 High
- mozilla thunderbirdEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...CVE-2019-11739Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt is possible to delete an IndexedDB key value and subsequently try to extract it during...CVE-2019-11752Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur while manipulating video elements if the body is freed...CVE-2019-11746Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSome HTML elements, such as <title> and <textarea>, can contain literal angle...CVE-2019-11744Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...CVE-2019-11743Fix available3.7 Low
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation occurs allowing the theft of cross-origin images through a...CVE-2019-11742Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 68,...CVE-2019-11740Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...CVE-2019-9811Fix available8.3 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...CVE-2019-11730Public exploitFix availableEPSS 20.3%6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...CVE-2019-11729Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...CVE-2019-11719Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where the caret ("^") character is improperly escaped constructing some...CVE-2019-11717Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreDue to an error while parsing page content, it is possible for properly sanitized user input to...CVE-2019-11715Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...CVE-2019-11713Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 morePOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...CVE-2019-11712Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...CVE-2019-11711Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMozilla developers and community members reported memory safety bugs present in Firefox 67 and...CVE-2019-11709Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...CVE-2019-11708In KEVPublic exploitFix availableEPSS 55.9%10.0 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...CVE-2019-11707In KEVPublic exploitFix availableEPSS 38.0%8.8 High
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a type confusion in...CVE-2019-11706Public exploitFix available7.5 High
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...CVE-2019-11705Public exploitFix available9.8 Critical
- Show moreLoading…