Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability in media channels could have led to memory corruption and a...CVE-2021-29985Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInstruction reordering resulted in a sequence of instructions that would cause an object to be...CVE-2021-29984Fix available8.8 High
- mozilla firefox, thunderbird +1 moreDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...CVE-2021-29982Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreAn issue present in lowering/register allocation could have led to obscure but deterministic...CVE-2021-29981Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...CVE-2021-29980Fix available8.8 High
- mozilla thunderbirdIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...CVE-2021-29969Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in code shared between Firefox and...CVE-2021-29976Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...CVE-2021-29970Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...CVE-2021-29964Fix available7.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...CVE-2021-29951Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...CVE-2021-29967Fix available8.8 High
- mozilla thunderbirdIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...CVE-2021-29957Fix available4.3 Medium
- mozilla thunderbirdOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...CVE-2021-29956Fix available4.3 Medium
- mozilla thunderbirdWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...CVE-2021-29949Fix available7.8 High
- mozilla thunderbirdSignatures are written to disk before and read during verification, which might be subject to a...CVE-2021-29948Fix available2.5 Low
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...CVE-2021-29946Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...CVE-2021-29945Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...CVE-2021-24002Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...CVE-2021-23999Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...CVE-2021-23998Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...CVE-2021-23995Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...CVE-2021-23994Fix available8.8 High
- mozilla thunderbirdAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...CVE-2021-23993Fix available6.5 Medium
- mozilla thunderbirdThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...CVE-2021-23992Fix available4.3 Medium
- mozilla thunderbirdIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...CVE-2021-23991Fix available6.8 Medium
- mozilla thunderbirdThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...CVE-2021-29950Fix available7.5 High
- mozilla firefox esr, thunderbird +1 moreAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...CVE-2021-4127Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 86 and...CVE-2021-23987Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious extension could have opened a popup window lacking an address bar. The title of the...CVE-2021-23984Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have scanned...CVE-2021-23982Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...CVE-2021-23981Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...CVE-2021-23978Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...CVE-2021-23973Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...CVE-2021-23969Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...CVE-2021-23968Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...CVE-2021-23964Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 morePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...CVE-2021-23960Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUsing the new logical assignment operators in a JavaScript switch statement could have caused a...CVE-2021-23954Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...CVE-2021-23953Fix available4.3 Medium
- mozilla thunderbirdDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...CVE-2020-15685Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...CVE-2020-35112Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...CVE-2020-35113Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...CVE-2020-35111Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have exposed...CVE-2020-26978Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...CVE-2020-26974Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....CVE-2020-26973Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain blit values provided by the user were not properly constrained leading to a heap buffer...CVE-2020-26971Fix available8.8 High
- mozilla thunderbirdWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...CVE-2020-26970Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSearching for a single word from the address bar caused an mDNS request to be sent on the local...CVE-2020-26966Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...CVE-2020-26968Fix available8.8 High
- Show moreLoading…