Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...CVE-2024-9401Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA potential memory corruption vulnerability could be triggered if an attacker had the ability to...CVE-2024-9400Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA website configured to initiate a specially crafted WebTransport session could crash the Firefox...CVE-2024-9399Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreBy checking the result of calls to `window.open` with specifically set protocol handlers, an...CVE-2024-9398Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA missing delay in directory upload UI could have made it possible for an attacker to trick a...CVE-2024-9397Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt is currently unknown if this issue is exploitable but a condition may arise where the...CVE-2024-9396Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...CVE-2024-9394Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...CVE-2024-9393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have allowed for the arbitrary loading of cross-origin pages....CVE-2024-9392Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...CVE-2024-8900Fix available7.5 High
- mozilla thunderbirdWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...CVE-2024-8394Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...CVE-2024-8387Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf a site had been granted the permission to open popup windows, it could cause Select elements...CVE-2024-8386Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...CVE-2024-8385Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...CVE-2024-8384Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreInternal browser event interfaces were exposed to web content when privileged EventHandler...CVE-2024-8382Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA potentially exploitable type confusion could be triggered when looking up a property name on an...CVE-2024-8381Public exploitFix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe date picker could partially obscure security prompts. This could be used by a malicious site...CVE-2024-7529Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...CVE-2024-7528Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUnexpected marking work at the start of sweeping could have led to a use-after-free. This...CVE-2024-7527Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...CVE-2024-7526Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...CVE-2024-7525Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreEditor code failed to check an attribute value. This could have led to an out-of-bounds read....CVE-2024-7522Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...CVE-2024-7521Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...CVE-2024-7520Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInsufficient checks when processing graphics shared memory could have led to memory corruption....CVE-2024-7519Fix available9.6 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreSelect options could obscure the fullscreen notification dialog. This could be used by a...CVE-2024-7518Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreType Confusion in Async Generators in Javascript EngineCVE-2024-7652Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 128 and Thunderbird 128CVE-2024-6615Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack framesCVE-2024-6614Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack framesCVE-2024-6613Fix available5.5 Medium
- mozilla firefox, thunderbird +1 moreCSP violation leakage when using devtoolsCVE-2024-6612Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect handling of SameSite cookiesCVE-2024-6611Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreForm validation popups could block exiting full-screen modeCVE-2024-6610Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMemory corruption in NSSCVE-2024-6609Fix available8.8 High
- mozilla firefox, thunderbird +1 moreCursor could be moved out of the viewport using pointerlock.CVE-2024-6608Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreLeaving pointerlock by pressing the escape key could be preventedCVE-2024-6607Fix available8.8 High
- mozilla firefox, thunderbird +1 moreOut-of-bounds read in clipboard componentCVE-2024-6606Fix available8.2 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13CVE-2024-6604Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in thread creationCVE-2024-6603Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in NSSCVE-2024-6602Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreRace condition in permission assignmentCVE-2024-6601Fix available4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in WebGL APICVE-2024-66006.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreOn Windows, when using the 'Save As' functionality, an attacker could have tricked the browser...CVE-2024-56926.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in the networking stack could have led to a potentially exploitable crash. This...CVE-2024-5702Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...CVE-2024-5700Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...CVE-2024-5696Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...CVE-2024-5693Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...CVE-2024-5691Fix available4.7 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy monitoring the time certain operations take, an attacker could have guessed which external...CVE-2024-5690Fix available4.3 Medium
- Show moreLoading…