CVE-2014-1577

CVE-2014-1577 affects Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2. The issue is in mozilla::dom::OscillatorNodeEngine::ComputeCustom() within Web Audio, where an invalid custom waveform can trigger a negative frequency, leading to an out-of-bounds r...

CVE-2014-1594

CVE-2014-1594 affects Mozilla Firefox (pre-34.0), Firefox ESR (pre-31.3), Thunderbird (pre-31.3), and SeaMonkey (pre-2.31). The underlying issue is a casting error: an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type. This can allow a remote attacker to exec...

CVE-2018-5184

CVE-2018-5184 describes a vulnerability in Mozilla Thunderbird (affecting Thunderbird ESR < 52.8 and Thunderbird

CVE-2025-5986

CVE-2025-5986 affects Thunderbird. A crafted HTML email that uses mailbox:/// links can trigger automatic, unsolicited downloads of PDF files to the user’s desktop or home directory without prompting, even if auto-saving is disabled. This can lead to disk-space exhaustion and potential credential...

CVE-2026-7321

CVE-2026-7321 describes a sandbox escape vulnerability in the WebRTC: Networking component, caused by incorrect boundary conditions. Affected product is Firefox ESR; the issue was fixed in Firefox ESR 140.10.1. The NVD entry lists a HIGH/CRITICAL impact profile with network attack vector, requiri...

CVE-2009-1308

CVE-2009-1308 is a cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.0.9, also affecting Thunderbird and SeaMonkey. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, with exploitation...

CVE-2009-1392

The CVE-2009-1392 issue affects Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17. It enables memory corruption that can cause a denial of service or potentially allow arbitrary code execution via multiple code paths in the browser engine and UI (e.g., nsEv...

CVE-2009-3984

CVE-2009-3984 affects Mozilla Firefox up to 3.0.16 and Firefox 3.5.x up to 3.5.6, as well as SeaMonkey up to 2.0.1. Root cause: spoofing of the SSL indicator by navigating a document.location to an HTTPS URL that serves a 204 No Content with an empty body, enabling a user-facing location-bar spoo...

CVE-2011-3005

CVE-2011-3005 is a use-after-free in Mozilla Firefox (4.x–6) that can be triggered via crafted OGG headers in a .ogg file, potentially leading to remote code execution or a crash. Affected products/versions include Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4. Root caus...

CVE-2012-0471

CVE-2012-0471 is documented in multiple connected advisories as a Cross-site Scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9. The root cause is a vulnerabi...

CVE-2012-1956

CVE-2012-1956 affects Mozilla Firefox (pre-15.0), Thunderbird (pre-15.0), and SeaMonkey (pre-2.12). The issue is that Object.defineProperty can shadow the top-level location object (window.location), enabling cross-site scripting via plugin-imbued vectors. MiracleLinux advisories enumerate CVE-20...

CVE-2012-1957

CVE-2012-1957 : An unspecified parser-utility class in Mozilla Firefox 4.x–13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 mishandles EMBED elements inside RSS description feeds, enabling remote XSS via a feed. Affected pro...

CVE-2012-5836

CVE-2012-5836 affects Mozilla Firefox (before 17.0), Mozilla Thunderbird (before 17.0), and SeaMonkey (before 2.14). The issue can allow remote code execution or an application crash when CSS properties are combined with SVG text, due to the root cause described by MFSA 2012-94. Public advisories...

CVE-2018-12368

CVE-2018-12368 describes a policy bypass where Windows 10 does not warn before opening SettingContent-ms files, enabling a WebExtension with downloads.open to execute arbitrary code without user interaction. Connected advisories confirm the issue affects Windows 10 and Mozilla products (Thunderbi...

CVE-2018-5170

CVE-2018-5170 is a vulnerability in Mozilla Thunderbird (including ESR) where an attacker can spoof the filename of an attachment, causing a user to open a remote attachment with an arbitrary file type. Affected products include Thunderbird/Thunderbird ESR before version 52.8. The underlying issu...

CVE-2010-2754

CVE-2010-2754 affects Mozilla Firefox 3.5.x before 3.5.11, Firefox 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6. It relates to the window.onerror path and may allow a remote attacker to obtain sensitive information about script parameters v...

CVE-2013-5615

CVE-2013-5615 concerns GetElementIC typed array stubs being generated outside observed typesets in the Mozilla JavaScript engine. The connected vendor notes identify affected products as Mozilla Firefox (and related Firefox ESR/Thunderbird/SeaMonkey lines in the 2013 MFSA bundle) with fixes imple...

CVE-2016-1523

CVE-2016-1523 concerns Graphite 2 Libgraphite’s SillMap::readFace in FeatureMap.cpp, used by Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1. A mis-handled return value can allow remote attackers to cause denial of service via a crafted Graphite smart font. Affected component is Gr...

CVE-2017-7752

CVE-2017-7752 is a use-after-free vulnerability triggered by specific user interactions with the input method editor (IME) in certain languages. The flaw is reported to affect Mozilla Firefox versions before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The impacted component is tied ...

CVE-2025-3522

Summary of CVE-2025-3522 (Thunderbird) : Thunderbird improperly processes the X-Mozilla-External-Attachment-URL header used for external attachments. When opening an email, Thunderbird fetches the URL to determine file size and may navigate to it when attaching is clicked. The URL is not validate...

CVE-2010-3166

CVE-2010-3166 concerns a heap-based buffer overflow in Mozilla code (nsTextFrameUtils::TransformText) that could allow remote code execution via a bidirectional text run. Affected products/versions: Firefox before 3.5.12 and 3.6.x before 3.6.9; Thunderbird before 3.0.7 and 3.1.x before 3.1.3; Sea...

CVE-2012-1958

CVE-2012-1958 is a use-after-free vulnerability in Mozilla Firefox’s nsGlobalWindow::PageHidden path that could allow remote code execution. The vulnerability affects Firefox 4.x–13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2...

CVE-2012-3994

Mode C: CVE-2012-3994 affects Mozilla Firefox family and related Mozilla components (e.g., Firefox, Firefox ESR, Thunderbird, SeaMonkey). Root cause: use of Object.defineProperty to shadow the top object and interaction with top.location, enabling remote XSS via a binary plugin. Affected versions...

CVE-2013-0773

CVE-2013-0773 corresponds to a vulnerability in the Chrome Object Wrapper (COW) and System Only Wrapper (SOW) security wrappers in Mozilla-based products. The issue allowed modifications to a prototype, enabling a non-specified remote site to access chrome objects or potentially execute JavaScrip...

CVE-2014-1563

Mozilla Firefox before 32.0 (and ESR 31.x before 31.1) and Thunderbird 31.x before 31.1 are affected by a use-after-free in mozilla::DOMSVGLength::GetTearOff triggered by an SVG animation with DOM interactions, enabling remote code execution or a denial of service via heap memory corruption. Upgr...

CVE-2015-0833

CVE-2015-0833 affects Mozilla Firefox (pre-36.0), Firefox ESR (pre-31.x up to 31.5), and Thunderbird (pre-31.5) on Windows. It is a local privilege-escalation via untrusted search paths where a Trojan horse DLL (e.g., bcrypt.dll) in the current working directory or a temporary directory is loaded...

CVE-2017-5413

CVE-2017-5413 : A segmentation fault can occur during bidirectional layout operations in Mozilla Firefox and Thunderbird. Affected products include Firefox and Thunderbird versions earlier than 52 (Firefox 52.x, Thunderbird 52.x) with the root cause described as a crash in bidirectional processin...

CVE-2025-3932

The CVE-2025-3932 issue concerns Thunderbird where an email could display a tracking link as an attachment; when opened, Thunderbird could access the external URL via the X-Mozilla-External-Attachment-URL header despite remote content blocking. Affected products: Thunderbird versions earlier than...

CVE-2026-7323

Memory safety bugs were reported in Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0, and Thunderbird 150.0.0, with evidence of memory corruption and the possibility that exploiting these could have permitted arbitrary code execution. These issues have been fixed in Firefox 150.0.1...

CVE-2007-3735

CVE-2007-3735 affects Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5. The vulnerability is in the JavaScript engine and can cause a remote crash via memory corruption, as described in the initial entry. Connected advisories also reference patches to address these issues (e.g., Fire...

CVE-2008-0415

CVE-2008-0415 affects Mozilla Firefox < 2.0.0.12, Thunderbird < 2.0.0.12, and SeaMonkey

CVE-2012-4181

CVE-2012-4181 is a use-after-free in Mozilla Firefox's nsSMILAnimationController::DoSample that can lead to remote code execution or a denial of service (heap memory corruption). Affected products include Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunde...

CVE-2012-4213

The CVE-2012-4213 issue is a concrete use-after-free vulnerability in Mozilla codepath: nsEditor::FindNextLeafNode affects Firefox and related products. Affected components per the initial description are Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14, with remote...

CVE-2013-1720

The CVE-2013-1720 issue affects Mozilla Firefox (pre-24.0), Thunderbird (pre-24.0), and SeaMonkey (pre-2.21) where the nsHtml5TreeBuilder::resetTheInsertionMode logic fails to correctly maintain the insertion-mode stack for template elements. This misstate allows a remote attacker to trigger use ...

CVE-2013-5593

The CVE-2013-5593 issue affects Mozilla Firefox (and related Mozilla products) where the SELECT element’s handling of HTML in dropdowns did not properly restrict content, allowing remote attackers to spoof the address bar or perform clickjacking via navigation-redirect vectors. Affected products/...

CVE-2013-5603

The vulnerability CVE-2013-5603 affects Mozilla Firefox before 25.0 (and related ESR/Thunderbird/SeaMonkey releases) via a use-after-free in nsContentUtils::ContentIsHostIncludingDescendantOf, enabling remote code execution or heap memory corruption through HTML document templates. Impact is remo...

CVE-2015-0797

CVE-2015-0797 affects GStreamer up to 1.4.4 (GStreamer 1.4.x) when used by Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux. The flaw is a buffer over-read in H.264 video data processing in the GStreamer pipeline (m4v files) that can cause a denial o...

CVE-2016-5294

CVE-2016-5294 : The Mozilla Updater can select an arbitrary target working directory for update-output files, requiring local access and restricting impact to Windows. Affected: Thunderbird < 45.5, Firefox ESR < 45.5, Firefox

CVE-2025-2830

Thunderbird vulnerability CVE-2025-2830: By crafting a malformed attachment filename in a multipart message, an attacker can coax Thunderbird into exposing a directory listing of /tmp when the message is forwarded or edited as a new message. This can lead to information disclosure from the victim...

CVE-2010-0171

CVE-2010-0171 affects Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3. It enables remote attackers to perform cross-origin keystroke capture and possibly XSS by abusing addEventListener and setTimeout with wrapped o...

CVE-2010-1207

CVE-2010-1207 concerns Mozilla Firefox and Thunderbird where a cross-origin canvas read restriction can be bypassed. The description in the connected documents states that Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly enforce read restrictions for CANVAS elements, allowing a r...

CVE-2012-0460

CVE-2012-0460 affects Mozilla Firefox 4.x–10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0–10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8. The issue arises from insufficiently restricting write access to the window.fullScreen object, enabling remote pages to spoof the use...

CVE-2012-1962

CVE-2012-1962 is a use-after-free in Mozilla’s JSDependentString::undepend that affects Firefox 4.x–13.0, ESR 10.x before 10.0.6, Thunderbird 5.0–13.0, and SeaMonkey before 2.11, enabling remote memory corruption and possibly arbitrary code execution. Connected advisories (e.g., MFSA2012-52 and r...

CVE-2012-5841

CVE-2012-5841 affects Mozilla Firefox (before 17.0), Firefox ESR (10.x before 10.0.11), Thunderbird (before 17.0), Thunderbird ESR (before 10.0.11) and SeaMonkey (before 2.14). The issue arises from cross-origin wrappers with a filtering behavior that fails to restrict write actions, enabling rem...

CVE-2016-1522

CVE-2016-1522 affects Graphite 2 Libgraphite (Graphite2 1.2.4) used in Firefox/Firefox ESR before 43.0. Code.cpp does not account for recursive load calls during a size check, enabling a remote attacker to trigger a denial of service (heap-based buffer overflow) or possibly execute arbitrary code...

CVE-2017-5418

CVE-2017-5418 is an out-of-bounds read error in parsing HTTP digest authorization responses, leading to information leakage. Affected products are Mozilla Firefox and Thunderbird prior to version 52.0. The issue is fixed in Firefox 52.0+ (and related Thunderbird updates per advisories), with reme...

CVE-2021-4126

The CVE-2021-4126 issue affects Thunderbird: when receiving an OpenPGP/MIME signed email with an outer MIME layer (e.g., mailing list footer), Thunderbird incorrectly treated inner content as signed. The root cause is that the displayed signature status was based on the inner part; since 91.4.1, ...

CVE-2011-3663

CVE-2011-3663 affects Mozilla Firefox 4.x–8.0, Thunderbird 5.0–8.0, and SeaMonkey before 2.6. It allows remote attackers to capture keystrokes entered on a web page via SVG animation accessKey events, even when JavaScript is disabled. The description in the provided documents states the affected ...

CVE-2012-0451

CVE-2012-0451 affects Mozilla Firefox 4.x–10.0 (and ESR 10.x before 10.0.3), Thunderbird 5.0–10.0, and SeaMonkey before 2.8. The issue is a CRLF injection via crafted HTTP headers that can bypass CSP restrictions and potentially enable XSS. Remediation in the connected documents points to applyin...

CVE-2012-1963

CVE-2012-1963 is a real vulnerability described in multiple sources. It affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x prior to 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x prior to 10.0.6, and SeaMonkey before 2.11. The issue is that the Content Security Policy (CSP) blocked-uri string...