CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2020-15648

CVE-2020-15648 involves a framing bypass: using object/embed tags could frame other sites even if X-Frame-Options blocks framing. Affected: Firefox < 78.0.2 and Thunderbird

CVE-2022-34481

The CVE-2022-34481 entry describes an integer overflow in nsTArray_Impl::ReplaceElementsAt() that could occur when replacing too many elements, affecting Firefox <102, Firefox ESR <91.11, Thunderbird <102, and Thunderbird

CVE-2023-4052

CVE-2023-4052 affects Firefox on Windows and Thunderbird < 115.1. The root cause is a Firefox updater directory that is writable by non-privileged users; during uninstall, files in that directory can be recursively deleted with the uninstall user’s permissions. This could enable arbitrary file...

CVE-2019-17009

CVE-2019-17009 affects Mozilla Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox

CVE-2023-29541

The CVE-2023-29541 issue concerns Firefox on Linux (and Thunderbird) where downloads of files ending with .desktop could be interpreted as commands, enabling attacker-controlled execution. Public advisories show affected products as Firefox (Linux) older than 112, Thunderbird older than 102.10, a...

CVE-2023-5174

The CVE-2023-5174 entry describes a Windows-specific issue in the Firefox sandbox handling: if a process fails to duplicate a handle during process creation, the sandbox code may double-free a pointer, causing a use-after-free and potentially an exploitable crash. Affected products are Firefox be...

CVE-2018-12383

CVE-2018-12383 describes an information disclosure in Thunderbird (and Firefox components) where, if a user saved passwords before migrating to the new password format (pre-Firefox 58) and later set a master password, an unencrypted copy of those passwords could remain accessible because the lega...

CVE-2022-28288

CVE-2022-28288 concerns memory-safety bugs in Firefox 98 that could allow arbitrary code execution. The connected Mozilla advisories (MFSA2022-13) enumerate multiple issues, including use-after-free in NSSToken/WebAuthN handling, out-of-bounds access in various components, and other memory-safety...

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2023-25744

CVE-2023-25744 describes memory-safety bugs in Firefox 109 and Firefox ESR 102.7 that led Mozilla to assess potential for arbitrary-code execution with enough effort. The issue affects Firefox versions earlier than 110 and Firefox ESR versions earlier than 102.8. Public notices in connected docum...

CVE-2023-4054

CVE-2023-4054 affects Firefox on Windows (Firefox < 116; ESR < 102.14, 115.1) and Thunderbird

CVE-2023-5170

In Firefox, CVE-2023-5170 covers a memory leak in the canvas rendering path where a compromised content process could cause a surface to change unexpectedly, leaking privileged-process memory and potentially enabling a sandbox escape. Affected software: Mozilla Firefox versions prior to 118. Root...

CVE-2023-5731

CVE-2023-5731 covers memory safety bugs in Firefox 118 that may allow arbitrary code execution; affected product branch is Firefox versions before 119. Connected sources confirm these memory corruption-style issues and indicate exploitation would require sufficient effort, with no public exploit ...

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

CVE-2017-5386

CVE-2017-5386 : WebExtension scripts can use the data: protocol to affect pages loaded by other web extensions, enabling potential data disclosure or privilege escalation. Public disclosures show the issue affects Mozilla Firefox releases including ESR builds and Firefox versions prior to 51.0.1 ...

CVE-2018-5103

CVE-2018-5103 is a use-after-free vulnerability that can occur during mouse event handling due to multiprocess-related issues, leading to potentially exploitable crashes. Affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2021-29990

CVE-2021-29990 corresponds to memory-safety bugs in Mozilla Firefox 90 that Mozilla notes could be exploited to run arbitrary code. The affected family is Firefox before 91; the risk is tied to memory corruption in Firefox components, with a plausible remote-code-execution impact as indicated in ...

CVE-2022-34480

Summary: CVE-2022-34480 affects Mozilla Firefox earlier than 102.0. The issue is in the lg_init() routine: when several allocations succeed but one fails, an uninitialized pointer could be freed, even though it was never allocated. This could enable arbitrary code execution or other impacts as de...

CVE-2022-46874

CVE-2022-46874 describes a filename truncation issue where a long filename could lose its valid extension, leaving a malicious extension that could confuse users or lead to execution of malicious code. Public reports indicate affected products include Firefox versions before 108 and Thunderbird v...

CVE-2025-4918

CVE-2025-4918 describes an out-of-bounds read/write on a JavaScript Promise object affecting Firefox and Thunderbird. Affected: Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1; Thunderbird < 128.10.2, Thunderbird

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird

CVE-2018-5091

CVE-2018-5091 describes a use-after-free in Firefox/Firefox ESR during WebRTC connections when handling DTMF timers, leading to a potentially exploitable crash. Public sources indicate affected products are Firefox ESR versions prior to 52.6 and Firefox prior to 58. Upstream/agency advisories con...

CVE-2018-5117

CVE-2018-5117 describes a URL spoofing issue where, when right-to-left text is used in the address bar with left-to-right alignment, the displayed URL can be scrolled to mislead users about the actual site. The vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5156

The CVE-2018-5156 entry describes a vulnerability in media capture: when the media source type is changed during capture, stream data can be cast to the wrong type, causing a crash. Affected products include Thunderbird

CVE-2022-34475

Mozilla Firefox vulnerability CVE-2022-34475 involves SVG tags referencing a same-origin document that could lead to script execution if attacker input is sanitized via the HTML Sanitizer API. Affected product: Firefox prior to version 102. Root cause: improper handling of in combination with s...

CVE-2018-12385

CVE-2018-12385 describes a potentially exploitable crash in TransportSecurityInfo used for SSL, triggered by data stored in the local cache within the user profile. Affected products include Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox

CVE-2017-5378

CVE-2017-5378 involves hashed codes of JavaScript objects enabling pointer leaks and potential data leakage. The vulnerability affects Mozilla products as noted in connected sources: Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2025-49710

CVE-2025-49710 corresponds to an integer overflow in the OrderedHashTable used by the JavaScript engine, affecting Mozilla Firefox versions earlier than 139.0.4. The vulnerability is documented across multiple sources (e.g., Mozilla MFSA advisory) and is rated critical (CVSS 3.1: 9.8) with potent...

CVE-2017-5376

CVE-2017-5376 is a use-after-free in XSL processing of XSLT documents. Connected IBM advisories tie this CVE to Mozilla Firefox components shipped in IBM Storwize V7000 Unified and IBM SONAS; affected products include Thunderbird and Firefox binaries reported in the CVE. The IBM bulletins specify...

CVE-2018-5098

CVE-2018-5098 is a use-after-free in Thunderbird/Firefox related to manipulating form input elements, focus, and selections via script content, causing potential crashes. Affected: Thunderbird < 52.6, Firefox ESR < 52.6, Firefox

CVE-2018-5102

CVE-2018-5102 is a use-after-free in HTML media element handling with media streams, affecting Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5148

CVE-2018-5148 is a use-after-free in Firefox/Firefox ESR’s compositor triggered during certain graphics operations due to using a raw pointer instead of a reference-counted one. Affected versions include Firefox ESR < 52.7.3 and Firefox

CVE-2019-11751

CVE-2019-11751 affects Firefox on Windows, with logs sanitization issue allowing a log file to be written to arbitrary locations (e.g., Startup folder). Affected products are Firefox < 69 and Firefox ESR

CVE-2023-32207

CVE-2023-32207 describes a missing delay in popup notifications that could let an attacker trick a user into granting permissions. Affected software includes Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2018-5097

CVE-2018-5097 is a use-after-free vulnerability in XSL transformations where the source document is manipulated by script content during transformation. Affected products include Mozilla Thunderbird and Firefox variants prior to version 52.6/58, with upstream fixes targeting Thunderbird 52.6.0 (a...

CVE-2018-5099

CVE-2018-5099 is a use-after-free vulnerability in the widget listener that can crash or potentially allow code execution when references to freed browser objects are used. Affected products/versions include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2022-45410

CVE-2022-45410 : When a ServiceWorker intercepted a request with a FetchEvent, the origin of the request could be lost after the ServiceWorker took ownership, negating SameSite cookie protections. Affected: Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2018-5159

CVE-2018-5159 describes an integer overflow in the Skia library caused by 32-bit integer use in an array without bounds checks, leading to out-of-bounds writes. This can crash web content and is potentially exploitable. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, F...

CVE-2018-5155

CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox

CVE-2022-36320

CVE-2022-36320 involves memory safety bugs found in Firefox 102 that, in some cases, could lead to memory corruption and potentially arbitrary code execution. Affected software: Firefox versions older than 103 (per multiple sources in connected documents). Root cause described as memory safety is...

CVE-2023-6135

CVE-2023-6135 corresponds to a Minerva side-channel vulnerability affecting NSS and Firefox, potentially enabling private-key recovery. The primary affected component is NSS NIST curves; Firefox versions before 121 are listed as affected. Public documents indicate remediation through updated NSS ...

CVE-2019-17021

CVE-2019-17021 describes a race condition during the initialization of a new content process in Firefox on Windows that can disclose heap addresses from the parent process. Affected products are Firefox ESR < 68.4 and Firefox

CVE-2020-6813

CVE-2020-6813 affects Firefox prior to 74, where protecting CSS blocks with the Content Security Policy nonce could be bypassed via an @import in a CSS block, allowing style injection and bypass of CSP intent. The IBM bulletin for IBM Cloud App Management documents this exact CVE and notes the vu...

CVE-2025-1932

CVE-2025-1932 is an information- and memory-safety issue in the XSLT txNodeSorter comparator, causing potential out-of-bounds access. Affected products and versions are Firefox (pre-136), Firefox ESR (pre-128.8), Thunderbird (pre-136), and Thunderbird (pre-128.8); root cause is an inconsistent co...

CVE-2017-5444

CVE-2017-5444 is a buffer overflow in parsing application/http-index-format data that enables an out-of-bounds read. Affected: Mozilla Thunderbird < 52.1, Firefox ESR < 45.9/52.1, and Firefox

CVE-2017-5460

CVE-2017-5460 is a use-after-free in Firefox/Thunderbird frame selection. Public docs confirm it affects Firefox/Firefox ESR (before 53) and Thunderbird (older branches) with a potentially exploitable crash and, in some advisories, possible arbitrary code execution. Root cause: use-after-free dur...

CVE-2019-17015

CVE-2019-17015 is a Windows-only memory corruption issue during the initialization of a new content process in Mozilla Firefox ESR < 68.4 and Firefox