Skip to content
Mozilla Thunderbird Esr vulnerabilities
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Plaintext of decrypted emails can leak through by user submitting an embedded form. This...
CVE-2018-5185
Fix available
6.5 Medium
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 more
Using remote content in encrypted messages can lead to the disclosure of plaintext. This...
CVE-2018-5184
Fix available
7.5 High
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
It is possible to spoof the filename of an attachment and display an arbitrary attachment name....
CVE-2018-5170
Fix available
4.3 Medium
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This...
CVE-2018-5162
Fix available
7.5 High
-
mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 more
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This...
CVE-2018-5161
Fix available
4.3 Medium
-
mozilla firefox, firefox esr, thunderbird +1 more +3 more
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...
CVE-2018-5174
7.5 High
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Mozilla developers backported selected changes in the Skia library. These changes correct memory...
CVE-2018-5183
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...
CVE-2018-5178
Fix available
8.1 High
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Sites can bypass security checks on permissions to install lightweight themes by manipulating the...
CVE-2018-5168
Fix available
5.3 Medium
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without...
CVE-2018-5159
Public exploitFix available
EPSS 20.6%
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text...
CVE-2018-5155
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with...
CVE-2018-5154
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...
CVE-2018-5150
Fix available
9.8 Critical
-
mozilla firefox, firefox esr, thunderbird +7 more +9 more
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...
CVE-2017-5398
Fix available
9.8 Critical
-
mozilla seamonkey, thunderbird, thunderbird esr +2 more
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...
CVE-2014-2018
4.3 Medium
-
mozilla seamonkey, thunderbird, thunderbird esr +2 more
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...
CVE-2013-6674
Public exploit
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0,...
CVE-2013-5604
9.3 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function...
CVE-2013-5603
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before...
CVE-2013-5602
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla...
CVE-2013-5601
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in...
CVE-2013-5600
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka...
CVE-2013-5599
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox...
CVE-2013-5597
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before...
CVE-2013-5596
6.8 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x...
CVE-2013-5595
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,...
CVE-2013-5593
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x...
CVE-2013-5591
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0,...
CVE-2013-5590
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird...
CVE-2013-1726
6.2 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...
CVE-2013-1737
5.0 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before...
CVE-2013-1736
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla...
CVE-2013-1735
9.3 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0,...
CVE-2013-1732
9.3 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...
CVE-2013-1730
6.8 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...
CVE-2013-1725
6.8 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation...
CVE-2013-1722
9.3 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0,...
CVE-2013-1718
10.0 High
-
mozilla firefox, thunderbird, thunderbird esr +2 more
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla...
CVE-2013-1712
6.9 Medium
-
mozilla firefox, thunderbird, thunderbird esr +2 more
Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x...
CVE-2013-1707
7.2 High
-
mozilla firefox, thunderbird, thunderbird esr +2 more
Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in...
CVE-2013-1706
7.2 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...
CVE-2013-1717
5.4 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8,...
CVE-2013-1714
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...
CVE-2013-1713
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before...
CVE-2013-1710
Public exploit
EPSS 41.7%
10.0 High
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...
CVE-2013-1709
4.3 Medium
-
mozilla firefox, seamonkey, thunderbird +1 more +3 more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0,...
CVE-2013-1701
10.0 High
-
mozilla firefox, thunderbird, thunderbird esr +2 more
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7,...
CVE-2013-1697
9.3 High
-
mozilla firefox, thunderbird, thunderbird esr +2 more
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7...
CVE-2013-1694
7.5 High
-
mozilla firefox, thunderbird, thunderbird esr +2 more
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7,...
CVE-2013-1693
4.3 Medium
-
mozilla firefox, thunderbird, thunderbird esr +2 more
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...
CVE-2013-1692
4.3 Medium
- Show olderLoading…