43901 matches found
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloade...
RHEL 9 : thunderbird (RHSA-2026:53475)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53475 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...
RHEL 9 : thunderbird (RHSA-2026:53444)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53444 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...
SUSE-SU-2026:3546-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.13. - MFSA 2026-72 bsc1271649 CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for forwarding CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719...
[SECURITY] [DLA 4727-1] thunderbird security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4727-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 10, 2026 https://wiki.debian.org/LTS -...
Firefox Thunderbird Security Bypass
The vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...
Widget Component DoS
The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...
Protection component Confidential Data Access
The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
Graphics component WebGPU Firefox Thunderbird Confidential Data Access
The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
Networking component: The JAR
Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...
Firefox Thunderbird DoS
The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Cookies Component Firefox Thunderbird DoS
The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
WebRTC Audio Video DoS
The vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client are related to insecure privilege management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
[SECURITY] [DLA 4726-1] ca-certificates CA certificate update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 09, 2026 https://wiki.debian.org/LTS -...
Debian dla-4726 : ca-certificates - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4726 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected]...
EulerOS 2.0 SP15 : ca-certificates (EulerOS-SA-2026-2877)
According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...
CLSA-2026-1771459787 TuxCare security update for org.mozilla:rhino (1 CVE)
TuxCare rebuilt org.mozilla:rhino to address 1 CVE. Fixed in 1.7.10-tuxcare.1...
atlassian-jwt-auth (>=2.10.1, <=3.0.1), mitmproxy (>=2.0.1, <=2.0.2) +10 more potentially affected by CVE-2026-69248 via cryptography (1.8.2)
cryptography PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.10.1, =2.0.1, =0.1.2, =0.4.0, =0.0.1, =1.3.6, =2.4.6, =1.1.1, =1.4.0, =1.5.0 Source cves: CVE-2026-69248 Source...
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...