Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreSome websites have a feature "Show Password" where clicking a button will change a password field...CVE-2020-26965Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...CVE-2020-26961Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf the Compact() method was called on an nsTArray, the array could have been reallocated without...CVE-2020-26960Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring browser shutdown, reference decrementing could have occured on a previously freed object,...CVE-2020-26959Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox did not block execution of scripts with incorrect MIME types when the response was...CVE-2020-26958Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...CVE-2020-26956Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...CVE-2020-26953Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...CVE-2020-26951Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...CVE-2020-26950Public exploitFix availableEPSS 42.3%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 81 and...CVE-2020-15683Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...CVE-2020-15678Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...CVE-2020-15677Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...CVE-2020-15676Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...CVE-2020-15673Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...CVE-2020-15663Fix available8.8 High
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...CVE-2020-15670Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...CVE-2020-15669Fix available8.8 High
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreBy holding a reference to the eval() function from an about:blank window, a malicious webpage...CVE-2020-15664Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUsing object or embed tags, it was possible to frame other websites, even if they disallowed...CVE-2020-15648Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox could be made to load attacker-supplied DLL files from the installation directory. This...CVE-2020-15657Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 78 and...CVE-2020-15659Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe code for downloading files did not properly take care of special characters, which led to an...CVE-2020-15658Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreJIT optimizations involving the Javascript arguments object could confuse later optimizations....CVE-2020-15656Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA redirected HTTP request which is observed or modified through a web extension could bypass...CVE-2020-15655Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...CVE-2020-15654Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....CVE-2020-15653Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...CVE-2020-15652Fix available6.5 Medium
- mozilla thunderbirdIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...CVE-2020-15646Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...CVE-2020-12421Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...CVE-2020-12420Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...CVE-2020-12419Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...CVE-2020-12418Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...CVE-2020-12417Fix available8.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...CVE-2020-12398Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...CVE-2020-12410Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...CVE-2020-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...CVE-2020-12405Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS has shown timing differences when performing DSA signatures, which was exploitable and could...CVE-2020-12399Fix available4.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-12393Fix available7.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...CVE-2020-12397Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 75 and...CVE-2020-12395Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...CVE-2020-12392Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....CVE-2020-12387Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...CVE-2020-6825Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...CVE-2020-6822Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading from areas partially or fully outside the source resource with WebGL's <code...CVE-2020-6821Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...CVE-2020-6820In KEVFix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...CVE-2020-6819In KEVFix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...CVE-2020-6814Fix available9.8 Critical
- Show moreLoading…