CVE-2017-5451

CVE-2017-5451 describes an address bar spoofing vulnerability via the onblur event, enabling a script to affect text display and make the loaded site appear different from what’s in the address bar. The issue affects Mozilla products including Thunderbird < 52.1, Firefox ESR < 52.1, and Fir...

CVE-2018-5178

CVE-2018-5178: A buffer overflow during UTF-8 to Unicode string conversion in JavaScript can occur when a vulnerable legacy extension is used. Affected products include Thunderbird ESR and Firefox ESR up to version 52.8 (ESR branches); Thunderbrid/Firefox ESR

CVE-2017-7810

CVE-2017-7810 refers to memory-safety bugs reported in Firefox 55 and Firefox ESR 52.3, with potential to exploit memory corruption to run arbitrary code. Connected documents confirm that Thunderbird

CVE-2016-9905

CVE-2016-9905 is tied to a crash in EnumerateSubDocuments when adding or removing sub-documents, affecting Thunderbird and Firefox ESR prior to 45.6. The connected sources consistently identify a crash/memory safety context (e.g., use-after-free and memory corruption patterns across related CVEs)...

CVE-2016-9066

CVE-2016-9066 is a Mozilla Firefox-related issue. IBM notes it as a buffer/ memory-safety problem in Firefox shipped with IBM SONAS; root cause described as a buffer overflow due to an integer overflow in nsScriptLoadHandler. Affected products include Thunderbird <45.5, Firefox ESR <45.5, a...

CVE-2018-5185

CVE-2018-5185 is a vulnerability in Mozilla Thunderbird where plaintext of decrypted emails can leak through when a user submits an embedded form. The public descriptions specify the affected products as Thunderbird ESR < 52.8 and Thunderbird

CVE-2018-5185

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2018-5098

CVE-2018-5098 is a use-after-free in Thunderbird/Firefox related to manipulating form input elements, focus, and selections via script content, causing potential crashes. Affected: Thunderbird < 52.6, Firefox ESR < 52.6, Firefox

CVE-2018-5127

The CVE-2018-5127 issue is a memory-safety buffer overflow in the SVG path handling (svg animatedPathSegList) triggered via script, allowing a potentially exploitable crash. Affected products and versions include Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2018-5097

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firef...

CVE-2017-7809

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-7792

A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier OID. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-5409

The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows...

CVE-2018-5127

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.7, Firefox ESR 52.7, and Firefox 59...

CVE-2017-5441

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5430

CVE-2017-5430 refers to memory-safety bugs reported in Firefox 52/52 ESR and Thunderbird 52 that could, with enough effort, be exploited to run arbitrary code. Affected products include Firefox (versions < 53), Firefox ESR (< 52.1), and Thunderbird (

CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

CVE-2017-7754

CVE-2017-7754 is an out-of-bounds read in WebGL when processing a malicious ImageInfo object during WebGL operations. Affected products/versions per connected docs: Firefox versions prior to 54 and Firefox ESR prior to 52.2, and Thunderbird prior to 52.2. The vulnerability stems from an improper ...