1610 matches found
Security Vulnerabilities fixed in Thunderbird 157 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Thunderbird 140.17 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Thunderbird 153.4 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Firefox ESR 115.42 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox ESR 140.17 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox 157 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox ESR 153.4 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Thunderbird 153.3 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Firefox ESR 140.16 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
Security Vulnerabilities fixed in Firefox ESR 115.41 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics:...
Security Vulnerabilities fixed in Firefox 156 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92033: Privilege escalation in Firefox for Android Reporter Steven Julian Impact high...
Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
Security Vulnerabilities fixed in Thunderbird 156 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Thunderbird 140.16 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Firefox for iOS 155.1 — Mozilla
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed...
Security Vulnerabilities fixed in Firefox 155 — Mozilla
Internally found bugs present in Firefox 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR...
Security Vulnerabilities fixed in Firefox ESR 115.40 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...
Security Vulnerabilities fixed in Firefox ESR 153.2 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Thunderbird 153.2 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Thunderbird 155 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Thunderbird 140.15 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Firefox ESR 140.15 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Firefox for iOS 155.0 — Mozilla
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content...
Security Vulnerabilities fixed in Firefox 154 — Mozilla
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Firefox ESR 140.14 — Mozilla
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Thunderbird 154 — Mozilla
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. Internal...
Security Vulnerabilities fixed in Thunderbird 153.1 — Mozilla
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs...
Security Vulnerabilities fixed in Firefox ESR 115.39 — Mozilla
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...
Security Vulnerabilities fixed in Firefox ESR 153.1 — Mozilla
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Thunderbird 140.14 — Mozilla
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs...
Security Vulnerabilities fixed in Firefox for Android 153.0.3 — Mozilla
CVE-2026-18809: Information disclosure in Firefox for Android and Firefox Focus for Android Reporter The Mozilla Fuzzing Team Impact high References Bug 2055683...
Security Vulnerabilities fixed in Thunderbird 153 — Mozilla
The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. Memory safety bugs present in...
Security Vulnerabilities fixed in Firefox ESR 140.13 — Mozilla
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 140.12 and...
Security Vulnerabilities fixed in Firefox 153 — Mozilla
Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed...
Security Vulnerabilities fixed in Firefox ESR 115.38 — Mozilla
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough...
Security Vulnerabilities fixed in Thunderbird 140.13 — Mozilla
The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. We are aware that exploit code for...
Security Vulnerabilities fixed in Firefox 152.0.6 — Mozilla
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...
Security Vulnerabilities fixed in Firefox for iOS 152.4 — Mozilla
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox...
Security Vulnerabilities fixed in Firefox for iOS 152.3 — Mozilla
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content...
Security Vulnerabilities fixed in Thunderbird 152.0.1 — Mozilla
A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. An attacker who can send HTML chat messages via Matrix ...
Security Vulnerabilities fixed in Thunderbird 140.12.1 — Mozilla
A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. An attacker who can send HTML chat messages via Matrix ...
Security Vulnerabilities fixed in Firefox 152.0.4 — Mozilla
Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...
Security Vulnerabilities fixed in Thunderbird 140.12 — Mozilla
Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in...
Security Vulnerabilities fixed in Firefox 152 — Mozilla
Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11,...
Security Vulnerabilities fixed in Firefox ESR 140.12 — Mozilla
Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in...
Security Vulnerabilities fixed in Thunderbird 152 — Mozilla
Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11,...
Security Vulnerabilities fixed in Firefox for iOS 152.0 — Mozilla
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in...
Security Vulnerabilities fixed in Firefox ESR 115.37 — Mozilla
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...
Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1 — Mozilla
CVE-2026-11799: UXSS in Focus for iOS / Klar Webkit navigation Reporter Renwa Hiwa Impact high References Bug 1975667...
Security Vulnerabilities fixed in Firefox 151.0.3 — Mozilla
CVE-2026-10701: Incorrect boundary conditions in the Graphics: Text component Reporter taiho kim Impact high References Bug 2038537 CVE-2026-10702: JIT miscompilation in the JavaScript Engine: JIT component Reporter Nebula Security Impact high References Bug 2040903...