1636 matches found
Security Vulnerabilities fixed in Thunderbird 160 — Mozilla
When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment a .desktop file on Linux, or a .url or .lnk file on Windows was replaced with the content of the file or URL it pointed to when the message was saved or sent...
Security Vulnerabilities fixed in Firefox ESR 153.7 — Mozilla
CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component Reporter Mozilla Impact high References Bug 2058035 CVE-2026-124854: Privilege escalation in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2060230 CVE-2026-124855:...
Security Vulnerabilities fixed in Firefox ESR 115.45 — Mozilla
CVE-2026-109736: Frame poisoning in the Layout component Reporter Mozilla Impact high References Bug 2029784 CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component Reporter Mozilla Impact high References Bug 2058035 CVE-2026-124952: Use-after-free in...
Security Vulnerabilities fixed in Thunderbird 153.7 — Mozilla
When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment a .desktop file on Linux, or a .url or .lnk file on Windows was replaced with the content of the file or URL it pointed to when the message was saved or sent...
Security Vulnerabilities fixed in Firefox 160 — Mozilla
CVE-2026-124852: Incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2001244 CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component Reporter Mozilla Impact high References Bug 2058035...
Security Vulnerabilities fixed in Firefox for iOS 160.0 — Mozilla
CVE-2026-121842: Privilege escalation in the Reader View component in Firefox for iOS Reporter navapon Impact high References Bug 2076233 CVE-2026-121843: Privilege escalation in Firefox for iOS Reporter Hoang Quan Impact high References Bug 2083030 CVE-2026-121841: Other issue in Firefox for iOS...
Security Vulnerabilities fixed in Firefox 159.0.1 — Mozilla
CVE-2026-120572: Incorrect boundary conditions in the Layout: Block and Inline component Reporter Mozilla Impact high References Bug 2079035...
Security Vulnerabilities fixed in Firefox ESR 153.6 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Reporter satyamasd...
Security Vulnerabilities fixed in Firefox 159 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Reporter satyamasd...
Security Vulnerabilities fixed in Thunderbird 153.6 — Mozilla
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the attachment as an external attachment pointing to an arbitrary URL, which Thunderbird then loaded without any user...
Security Vulnerabilities fixed in Firefox ESR 115.44 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
Security Vulnerabilities fixed in Thunderbird 159 — Mozilla
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the attachment as an external attachment pointing to an arbitrary URL, which Thunderbird then loaded without any user...
Security Vulnerabilities fixed in Firefox for iOS 156.1 — Mozilla
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear ...
Security Vulnerabilities fixed in Firefox for Android 158.0.2 — Mozilla
CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component Reporter Wayne Impact high References Bug 2084311...
Security Vulnerabilities fixed in Thunderbird 153.5.1 — Mozilla
When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. Thunderbird did n...
Security Vulnerabilities fixed in Firefox ESR 153.5.1 — Mozilla
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...
Security Vulnerabilities fixed in Thunderbird 158.0.1 — Mozilla
When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. Thunderbird did n...
Security Vulnerabilities fixed in Firefox 158.0.1 — Mozilla
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...
Security Vulnerabilities fixed in Firefox ESR 115.43.1 — Mozilla
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...
Security Vulnerabilities fixed in Thunderbird 153.5 — Mozilla
A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours...
Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...
Security Vulnerabilities fixed in Firefox 158 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...
Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...
Security Vulnerabilities fixed in Thunderbird 158 — Mozilla
Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...
Security Vulnerabilities fixed in Firefox 157.0.1 — Mozilla
CVE-2026-106016: Mitigation bypass in the File Handling component Reporter Abdulrahman Alzahrani Impact moderate References Bug 2067465...
Security Vulnerabilities fixed in Firefox for iOS 157.1 — Mozilla
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. Firefox for iOS could autofill saved credentials into a ne...
Security Vulnerabilities fixed in Thunderbird 157 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Thunderbird 140.17 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Thunderbird 153.4 — Mozilla
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size...
Security Vulnerabilities fixed in Firefox ESR 140.17 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox ESR 115.42 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox ESR 153.4 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Firefox 157 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...
Security Vulnerabilities fixed in Thunderbird 153.3 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Firefox ESR 115.41 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics:...
Security Vulnerabilities fixed in Firefox ESR 140.16 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
Security Vulnerabilities fixed in Firefox 156 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
Security Vulnerabilities fixed in Thunderbird 140.16 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Thunderbird 156 — Mozilla
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...
Security Vulnerabilities fixed in Firefox for iOS 155.1 — Mozilla
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed...
Security Vulnerabilities fixed in Firefox ESR 153.2 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Firefox ESR 115.40 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...
Security Vulnerabilities fixed in Firefox 155 — Mozilla
Internally found bugs present in Firefox 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR...
Security Vulnerabilities fixed in Thunderbird 155 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Thunderbird 153.2 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Firefox ESR 140.15 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
Security Vulnerabilities fixed in Thunderbird 140.15 — Mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. A maliciously constructed mail header could lead to a one byte read past the end of a buffer. A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID...
Security Vulnerabilities fixed in Firefox for iOS 155.0 — Mozilla
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content...
Security Vulnerabilities fixed in Thunderbird 154 — Mozilla
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. Internal...