Skip to contentMozilla Thunderbird vulnerabilities
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...CVE-2023-6857Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...CVE-2023-6856Fix availableEPSS 20.6%8.8 High
- mozilla thunderbird, debian linux +1 moreThe signature of a digitally signed S/MIME email message may optionally specify the signature...CVE-2023-50761Fix available4.3 Medium
- mozilla thunderbird, debian linux +1 moreWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...CVE-2023-50762Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...CVE-2023-6212Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...CVE-2023-6209Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using X11, text selected by the page using the Selection API was erroneously copied into the...CVE-2023-6208Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...CVE-2023-6207Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...CVE-2023-6206Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to cause the use of a MessagePort after it had already been freed, which could...CVE-2023-6205Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...CVE-2023-6204Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional charactersCVE-2023-5732Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...CVE-2023-5730Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...CVE-2023-5728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...CVE-2023-5727Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA website could have obscured the full screen notification by using the file open dialog. This...CVE-2023-5726Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...CVE-2023-5388Fix available6.5 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf Windows failed to duplicate a handle during process creation, the sandbox code may have...CVE-2023-5174Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...CVE-2023-51689.8 Critical
- google chrome, libwebp, bandisoft honeyview +10 more +12 moreDuplicate Advisory: Bundled libwebp in Pillow vulnerableCVE-2023-4863In KEVPublic exploitFix availableEPSS 100.0%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBuffer Overflow in WebGL glGetProgramivCVE-2023-4582Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInteger Overflow in RecordedSourceSurfaceCreationCVE-2023-4576Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2CVE-2023-4585Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2CVE-2023-4584Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private WindowCVE-2023-4583Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreXLL file extensions were downloadable without warningsCVE-2023-4581Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencryptedCVE-2023-4580Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory ExceptionCVE-2023-4578Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in JIT UpdateRegExpStaticsCVE-2023-4577Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC FilePickerShownCallbackCVE-2023-4575Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC ColorPickerShownCallbackCVE-2023-4574Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC CanvasTranslatorCVE-2023-4573Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...CVE-2023-4057Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening appref-ms files, Firefox did not warn the user that these files may contain...CVE-2023-4054Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox updater created a directory writable by non-privileged users. When uninstalling...CVE-2023-4052Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by external programCVE-2023-4053Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by file open dialogCVE-2023-4051Fix available7.5 High
- mozilla thunderbird, debian linux +1 moreFile Extension Spoofing using the Text Direction Override CharacterCVE-2023-3417Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free in workersCVE-2023-3600Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...CVE-2023-37211Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...CVE-2023-37208Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a URL with a scheme handled by...CVE-2023-37207Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...CVE-2023-37202Fix available8.8 High
- Show moreLoading…