CVE-2018-12376

CVE-2018-12376 involves memory safety bugs in Firefox 61/ESR 60.1 and Thunderbird

CVE-2023-0430

CVE-2023-0430 affects Thunderbird (68–102.7.0) where the OCSP revocation status of S/MIME certificates was not checked during signature verification, causing mail signed with a revoked certificate to appear valid. Public references in the provided documents confirm Thunderbird

CVE-2018-12365

CVE-2018-12365 is a vulnerability where a compromised IPC child process can escape the content sandbox and list names of arbitrary files on the file system without user consent. It affects Thunderbird (versions below 60, including 52.9) and Firefox-based products (Firefox ESR < 60.1/52.9, Fire...

CVE-2021-29951

CVE-2021-29951 involves the Mozilla Maintenance Service granting SERVICE_START access to BUILTIN|Users, enabling domain users to start/stop the browser update service. Affected: Windows systems older than Windows 10 build 1709; Firefox prior to 87 and Firefox ESR prior to 78.10.1, Thunderbird pri...

CVE-2019-9815

CVE-2019-9815 describes a timing-attack similar to Spectre when hyperthreading is not disabled. Affected: macOS content threads (macOS 10.14.5 introduces a sysctl option to disable hyperthreading for untrusted code on the main or worker JavaScript threads), and affected Firefox/Thunderbird versio...

CVE-2023-4582

CVE-2023-4582 is a Firefox-on-macOS-specific issue where large allocation checks in Angle for GLSL shaders could overflow a private shader memory allocation, leading to a buffer overflow. The vulnerability affects Firefox versions earlier than 117 (and Firefox ESR < 115.2, Thunderbird

CVE-2023-5730

The CVE-2023-5730 entry concerns memory safety bugs in Mozilla Firefox (Firefox 118 and ESR 115.3) and Thunderbird 115.3 that could allow arbitrary code execution. Affected versions are Firefox < 119, Firefox ESR < 115.4, and Thunderbird

CVE-2021-38497

CVE-2021-38497 describes a UI spoofing issue caused by using reportValidity() together with window.open(), which could overlay a plain-text validation message on another origin. Affected software versions are Firefox < 93, Thunderbird < 91.2, and Firefox ESR

CVE-2021-29987

CVE-2021-29987 describes a UI permission trick where after requesting multiple permissions and closing the first panel, subsequent panels appear in a different position but still register a click in the default location, potentially causing a user to grant unwanted permissions. Technical details ...

CVE-2022-46882

CVE-2022-46882 is a use-after-free in WebGL extensions that could cause a crash in affected Mozilla products. Affected software include Firefox versions before 107 and Firefox ESR before 102.6, and Thunderbird before 102.6. The connected documents identify the underlying issue as a use-after-free...

CVE-2023-4576

CVE-2023-4576 affects Mozilla Firefox on Windows, where an integer overflow in RecordedSourceSurfaceCreation can cause a heap buffer overflow potentially leaking data and enabling sandbox escape. Affected products/versions listed include Firefox on Windows and Firefox/Thunderbird releases older t...

CVE-2018-12362

CVE-2018-12362 is an integer overflow in the SSSE3 scaler used during graphics operations, affecting Thunderbird and Firefox variants prior to specific versions (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2022-40962

CVE-2022-40962 is a memory safety issue in Firefox 104 and Firefox ESR 102.2 reported by Mozilla Fuzzing Team. The connected documents confirm memory corruption indicators and state that, with enough effort, some bugs could be exploited to run arbitrary code. The vulnerability affects Firefox ESR...

CVE-2017-5436

CVE-2017-5436 is an out-of-bounds write in the Graphite 2 library triggered by a malicious Graphite font, causing a potentially exploitable crash. The issue was fixed in Graphite 2 and in Mozilla products; affected Mozilla components include Thunderbird < 52.1, Firefox ESR < 45.9 and < 5...

CVE-2018-12359

CVE-2018-12359 is a buffer overflow in rendering canvas content when dynamically adjusting the height/width, potentially causing a crash. Affected: Thunderbird and Firefox variants (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2023-5724

The connected Astra Linux bulletin confirms CVE-2023-5724: Drivers are not always robust to extremely large draw calls, potentially causing crashes in Firefox before 119, Firefox ESR before 115.4, and Thunderbird before 115.4.1. Affected versions are Firefox <119, Firefox ESR <115.4, Thunde...

CVE-2018-12377

CVE-2018-12377 is a use-after-free vulnerability that can occur when refresh driver timers are refreshed during shutdown, potentially causing a crash when the timer is deleted while still in use. The issue affects Thunderbird versions prior to 60.2.1 (and related Firefox/ESR components). The docu...

CVE-2018-5089

CVE-2018-5089 is a memory-safety vulnerability affecting Mozilla products: Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5150

CVE-2018-5150 concerns memory safety bugs in Firefox 59/ESR 52.7 and Thunderbird 52.7, with potential memory corruption that could allow arbitrary code execution. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR

CVE-2018-5188

CVE-2018-5188 involves memory safety bugs in Firefox 60/ESR 60 and Thunderbird

CVE-2021-29982

CVE-2021-29982 affects Firefox and Thunderbird prior to version 91. Root cause: incorrect JIT optimization causing type confusion, leading to potential leakage of a single memory bit. Connected advisories confirm the issue and describe remediation as upgrading to Firefox/Thunderbird version 91 or...

CVE-2025-1930

CVE-2025-1930 describes a use-after-free in the Firefox/Thunderbird browser processes on Windows, triggered by malformed StreamData sent over AudioIPC from a compromised content process, potentially enabling a sandbox escape in the Browser process. Connected advisories confirm affected versions i...

CVE-2011-3000

Affected software: Mozilla Firefox before 3.6.23 and 4.x through 6; also affects Thunderbird before 7.0 and SeaMonkey before 2.4. Root cause: HTTP response handling flaw that allows HTTP response splitting when responses contain multiple Location, Content-Length, or Content-Disposition headers. I...

CVE-2022-3266

CVE-2022-3266 is an out-of-bounds read in H.264 video decoding that can trigger a crash. Affected products in the provided documents include Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox

CVE-2017-5375

CVE-2017-5375 affects Mozilla Thunderbird, Firefox ESR, and Firefox prior to certain version thresholds. The issue is a JIT code allocation vulnerability that can bypass ASLR and DEP, enabling memory corruption. Public exploit activity exists (ASM.JS JIT-Spray PoCs) for multiple Firefox versions ...

CVE-2018-12363

CVE-2018-12363 is a use-after-free vulnerability in Firefox/Thunderbird caused by mutation events moving DOM nodes between documents. The old document may be freed while a stale pointer remains, potentially enabling a crash. Public references show affected products include Thunderbird versions ol...

CVE-2018-12366

CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...

CVE-2021-38492

CVE-2021-38492 affects Mozilla Firefox on Windows, where delegating navigations to the OS could accept mk: URLs and load Internet Explorer in unprivileged mode. The vulnerability impacts Firefox versions older than 92 (and related Thunderbird/ ESR lines). Remediation is to upgrade to Firefox 92+ ...

CVE-2023-5725

CVE-2023-5725 is a documented vulnerability affecting Firefox (before 119), Firefox ESR (before 115.4), and Thunderbird (before 115.4.1). A malicious installed WebExtension could open arbitrary URLs, which under certain conditions could enable collection of sensitive user data. The connected docu...

CVE-2022-34472

CVE-2022-34472 : If a PAC URL is configured and the PAC host is unreachable, OCSP requests are blocked, leading to incorrect error pages being shown. Affected: Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, Thunderbird

CVE-2018-12364

The CVE-2018-12364 entry affects Thunderbird and was mitigated in various distributions through Thunderbird 52.9.1 and related security advisories. The connected documents confirm concrete details: NPAPI plugins (e.g., Flash) can bypass CORS by issuing a same-origin POST that redirects (307) to t...

CVE-2018-12378

CVE-2018-12378 is a use-after-free in Thunderbird/Firefox related to deleting an IndexedDB index while it is still in use by JavaScript, causing a potentially exploitable crash. Affected: Thunderbird

CVE-2021-23991

CVE-2021-23991 affects Thunderbird before 78.9.1. If a user has previously imported Alice’s OpenPGP key and Alice extends its validity but the updated key hasn’t been imported, an attacker can send a crafted version of Alice’s key containing an invalid subkey. Thunderbird may then attempt to use ...

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2021-23992

Thunderbird is affected by CVE-2021-23992, where an attacker can craft an OpenPGP key by replacing an original user ID or adding another, causing the user to be confused about key ownership. The issue stems from Thunderbird not checking that the OpenPGP key’s user ID has a valid self-signature be...

CVE-2021-38495

CVE-2021-38495 relates to memory safety bugs reported in Mozilla Thunderbird 78.13.0, with evidence of memory corruption and the possibility that, with effort, exploit could lead to arbitrary code execution. The vulnerability affects Thunderbird < 91.1 and Firefox ESR

CVE-2022-31742

CVE-2022-31742 describes a timing-attack flaw in WebAuthn: an attacker could send many allowCredential entries and distinguish valid vs invalid key handles, enabling cross-origin account linking. Affected products in the provided records are Thunderbird < 91.10, Firefox < 101, and Firefox ESR

CVE-2017-5380

CVE-2017-5380 is a use-after-free vulnerability related to SVG content processing. Connected IBM advisories confirm this CVE ID is present and tie it to vulnerabilities in Mozilla Firefox shipped with IBM Storwize V7000 Unified and IBM SONAS. Affected IBM products and versions are IBM Storwize V7...

CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...

CVE-2019-17009

CVE-2019-17009 affects Mozilla Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox

CVE-2020-15648

CVE-2020-15648 involves a framing bypass: using object/embed tags could frame other sites even if X-Frame-Options blocks framing. Affected: Firefox < 78.0.2 and Thunderbird

CVE-2023-5174

The CVE-2023-5174 entry describes a Windows-specific issue in the Firefox sandbox handling: if a process fails to duplicate a handle during process creation, the sandbox code may double-free a pointer, causing a use-after-free and potentially an exploitable crash. Affected products are Firefox be...

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2022-34481

The CVE-2022-34481 entry describes an integer overflow in nsTArray_Impl::ReplaceElementsAt() that could occur when replacing too many elements, affecting Firefox <102, Firefox ESR <91.11, Thunderbird <102, and Thunderbird

CVE-2018-12383

CVE-2018-12383 describes an information disclosure in Thunderbird (and Firefox components) where, if a user saved passwords before migrating to the new password format (pre-Firefox 58) and later set a master password, an unencrypted copy of those passwords could remain accessible because the lega...

CVE-2023-29541

The CVE-2023-29541 issue concerns Firefox on Linux (and Thunderbird) where downloads of files ending with .desktop could be interpreted as commands, enabling attacker-controlled execution. Public advisories show affected products as Firefox (Linux) older than 112, Thunderbird older than 102.10, a...

CVE-2010-3765

CVE-2010-3765 is a remote code execution/memory corruption vulnerability in Mozilla’s browser stack (Firefox, SeaMonkey, Thunderbird) triggered when JavaScript runs. Technical root cause involves DOM/frame construction logic, including nsCSSFrameConstructor::ContentAppended, the appendChild path,...

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2018-5103

CVE-2018-5103 is a use-after-free vulnerability that can occur during mouse event handling due to multiprocess-related issues, leading to potentially exploitable crashes. Affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox