Bound Check Bypass

Mozilla Thunderbird is vulnerable to bound check bypass. It does not properly perform bounds checking when Spectre mitigations are disabled...

Use-after-free

Mozilla Thunderbird is vulnerable to use-after-free vulnerability. The attack exists because of use-after-free with SMIL animation controller...

Type Confusion

Mozilla Thunderbird is vulnerable to type confusion due to wrong type inferencing for constructors entered through on-stack replacement with IonMonkey...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to information leakage due to IonMonkey leaks JSOPTIMIZEDOUT magic value to script...

Denial Of Sevice (DoS)

Mozilla Thunderbird is vulnerable to denial of sevice DoS due to use-after-free when removing in-use DOM elements...

Unauthorised Access

Mozilla Thunderbird is vulnerable to unauthorised access. Proxy Auto-Configuration file can define localhost access to be proxied...

Arbitrary Code Execution

Mozilla Thunderbird is vulnerable to arbitrary code execution. A type confusion due to memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 allows an attacker to execute arbitrary code in the host OS...

Information Disclosure

Mozilla Thunderbird is vulnerable to information disclosure vulnerability. An attacker could submit an embedded form and leak the plaintext of decrypted emails by persuading a victim to visit a specially crafted Web site...

Weak Encryption

Mozilla Thunderbird is vulnerable to weak encryption vulnerability. This exists in the Decrypted S/MIME parts. An attacker could leak plaintext by submitting an embedded form when included in a HTML reply/forward which may leads to disclosure of sensitive information...

Weak Encryption

Mozilla Thunderbird is vulnerable to weak encryption attacks. This is because dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag could leak plaintext when included in a HTML reply/forward which may leads to disclosure of sensitive information...

Cross Site Scripting (XSS)

Mozilla Thunderbird is vulnerable to cross site scripting XSS vulnerability. This affects an unknown functionality of the component RSS Feed Handler. Attackers can execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website...

Code Injection

Mozilla Thunderbird is vulnerable to remote code execution vulnerability. RSS fields can inject new lines into the created email structure, modifying the message body...

Information Disclosure

Mozilla Thunderbird is vulnerable to information disclosure. Attackers can use a crafted CSS in an RSS feed that would leak and reveal local path strings, which may contain user name...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Cross-site Scripting (XSS)

Mozilla Thunderbird is vulnerable to cross-site scripting XSS attacks. This is because the content security policy CSP "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified allowing a malicious attacke...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to buffer overflow vulnerability. This occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. An incorrect value being passed within the library during checks and results in a potentially exploitable crash...

Arbitrary Code Execution

Mozilla Thunderbird is a vulnerable to arbitrary code execution attacks. This is because of some of the memory safety bugs in Firefox which allows an attacker to execute arbitrary codes...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to use-after-free vulnerability. This occurs in design mode when image objects are resized if objects referenced during the resizing have been freed from memory resulting in a potentially exploitable crash...

Access Controls Bypass

Mozilla Thunderbird is vulnerable to access controls bypass. File downloads encoded with blob: and data: URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. Malicious sites could lure users into...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to use-after-free vulnerability. This occurs when manipulating arrays of Accessible Rich Internet Applications ARIA elements within containers through the DOM resulting in a potentially exploitable crash...