Mozilla Thunderbird < 52.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-17 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer...

Mozilla Thunderbird < 52.7

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-09 advisory. - Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6...

Mozilla Firefox < 62.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 62.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-20 advisory. - A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript...

Mozilla Firefox < 57.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 57.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-27 advisory. - When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB a...

Mozilla Thunderbird < 115.0.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-27 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment...

Mozilla Firefox ESR < 60.2.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-24 advisory. - A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments...

Mozilla Thunderbird < 52.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-26 advisory. - Mozilla developers and community members Christian Holler, David Keeler, Jon Coppeard, Julien Cristau, Ja...

Mozilla Firefox < 51.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 51.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-01 advisory. - A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired...

Mozilla Firefox ESR < 52.1.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.1.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2017-14 advisory. - A use-after-free can occur during Buffer11 API calls within the ANGLE graphics library, used for WebGL content...

Mozilla Thunderbird < 60.4

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-31 advisory. - A potential vulnerability leading to an integer overflow can occur during buffer size calculations for...

Mozilla Firefox < 58.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 58.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-02 advisory. - Mozilla developers and community members Calixte Denizet, Christian Holler, Alex Gaynor, Yoshi Huang, Bob...

Mozilla Firefox ESR < 60.3

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-27 advisory. - When manipulating user events in nested loops while opening a document through script, it is possible to...

Mozilla Firefox < 58.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 58.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-05 advisory. - Sanitize HTML fragments created for chrome-privileged documentsCVE-2018-5124 CVE-2018-5124 Note that Nessus has not...

Mozilla Thunderbird < 52.3

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-20 advisory. - Mozilla developers and community members Masayuki Nakano, Gary Kwong, Ronald Crane, Andrew McCreight, Tys...

Mozilla Firefox < 85.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 85.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-06 advisory. - In the Angle graphics library, depth pitch computations did not take into account the block size and simply multipli...

Mozilla Firefox < 52.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 52.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-05 advisory. - Mozilla developers and community members Carsten Book, Calixte Denizet, Christian Holler, Andrew McCreight,...

CVE-2025-12792: Incorrect Default Permissions

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-34324: Improper Verification of Cryptographic Signature

GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate...

PT-2025-47339

Name of the Vulnerable Software and Affected Versions GoSign Desktop versions 2.4.0 and earlier Description GoSign Desktop versions 2.4.0 and earlier utilize an unsigned update manifest for application updates. This manifest includes package URLs and SHA-256 hashes, but lacks digital signing,...

Mozilla Firefox < 59.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 59.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-06 advisory. - A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during edit...