2028 matches found
CVE-2010-0161
CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...
CVE-2011-3666
Based on the Connected documents, CVE-2011-3666 is tied to Mozilla Firefox and Thunderbird on Mac OS X where a fix for CVE-2011-2372 was incorrectly applied, allowing a user-assisted bypass related to executable handling of .jar-like files via crafted web content. The Nessus/OpenSSH-related advis...
CVE-2014-1586
CVE-2014-1586 affects Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2. The issue is that the code path in content/base/src/nsDocument.cpp does not consider whether WebRTC video sharing is occurring, allowing a remote attacker to obtain sensitive informa...
CVE-2025-10536
An information disclosure vulnerability exists in the Networking: Cache component of Mozilla products, including Firefox , Firefox ESR , and Thunderbird . The root cause is an error within the cache component that could allow an attacker to obtain sensitive information. This vulnerability affects...
CVE-2026-0877
A mitigation bypass vulnerability exists in the DOM: Security component of several Mozilla products. This flaw allows an attacker to remotely circumvent existing security restrictions due to a weakness in data protection mechanisms. The issue affects Mozilla Firefox (versions prior to 147), Firef...
CVE-2026-16385
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-74977
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2005-0590
CVE-2005-0590 affects Firefox <1.0.1, Thunderbird <1.0.1, and Mozilla
CVE-2008-6961
CVE-2008-6961 affects mailnews in Mozilla Thunderbird (before 2.0.0.18) and SeaMonkey (before 1.1.13). When JavaScript is enabled in mail, a malicious script can read DOM properties (documentURI, textContent) to disclose sensitive recipient information or comments in forwarded mail. This is a cli...
CVE-2009-2535
CVE-2009-2535 affects Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird, enabling remote attackers to trigger memory consumption and a crash (DoS) by supplying a large integer as the length property of a Select element. Root cause and exploit details are not expande...
CVE-2012-1971
CVE-2012-1971 concerns Mozilla Firefox (pre-15.0), Thunderbird (pre-15.0), and SeaMonkey (pre-2.12). The description identifies memory corruption and potential remote code execution or crashes related to garbage collection after certain MethodJIT execution, plus other unspecified vectors. Impact ...
CVE-2012-3105
Affected software: Mozilla Firefox (WebGL glBufferData path) and related Mozilla components (Firefox 4.x–12.0, ESR 10.x before 10.0.5, Thunderbird 5.0–12.0, SeaMonkey before 2.10). Vulnerability and root cause: The description states a flaw in an NVIDIA driver allows remote attackers to trigger m...
CVE-2013-0797
CVE-2013-0797 affects Mozilla Updater components in Mozilla Firefox (pre-20.0), Firefox ESR (<17.0.5), Thunderbird (<17.0.5, ESR), and SeaMonkey (
CVE-2017-7765
CVE-2017-7765 corresponds to a Mark of the Web bypass on Windows when saving files with very long names, bypassing the security warning before running downloaded executables. Affected products include Firefox < 54, Firefox ESR < 52.2, and Thunderbird
CVE-2026-12306
A memory safety bug has been identified and fixed in Mozilla Firefox and Mozilla Thunderbird . The vulnerability affects multiple versions, including Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. While the specific root cause is described generally as a memory safety i...
CVE-2026-12328
Memory safety bugs exist in Firefox ESR 115.36 , Firefox ESR 140.11 , Thunderbird ESR 140.11 , Firefox 151 , and Thunderbird 151 . These vulnerabilities may result in memory corruption, which could potentially be exploited to execute arbitrary code with sufficient effort. Remediation is available...
CVE-2026-16362
A use-after-free vulnerability exists in the WebRTC: Audio/Video component of the Mozilla Firefox and Thunderbird browsers. This security flaw could potentially allow for the execution of arbitrary code. The issue has been resolved in Firefox 153 , Firefox ESR 140.13 , and Thunderbird 153/140.13 ...
CVE-2026-74945
CVE-2026-74945 identifies an information disclosure vulnerability within the Graphics: Text component of Firefox and Thunderbird . The root cause involves an uninitialized heap disclosure that can be triggered via a crafted web font. Specifically, a malicious @font-face font can walk the OTS outp...
CVE-2026-74953
A privilege escalation vulnerability exists in the Networking: Cookies component of Mozilla Firefox and Mozilla Thunderbird . The flaw was addressed in Firefox 154 , Firefox ESR 140.14 , Firefox ESR 153.1 , Thunderbird 154 , Thunderbird 140.14 , and Thunderbird 153.1 . No specific root cause or e...
CVE-2026-74976
The JavaScript Engine: JIT component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to a JIT miscompilation flaw (CVE-2026-74976). This issue is addressed in Firefox 154 , Firefox ESR 140.14 , Firefox ESR 153.1 , Thunderbird 154 , Thunderbird 140.14 , and Thunderbird 153.1 . While sever...
CVE-2026-84131
Mozilla Firefox and Thunderbird are affected by a privilege escalation vulnerability caused by an invalid pointer within the Graphics component . This security issue could potentially allow for the execution of arbitrary code or other unauthorized actions. Remediation is available in the followin...
CVE-2026-92036
The Networking: HTTP component in Mozilla Firefox and Thunderbird is vulnerable to incorrect boundary conditions . This security flaw has been addressed in Firefox 156 and Thunderbird 156 . While the vulnerability has been reported in the wild as of September 17, 2026, specific exploitation detai...
CVE-2026-92048
A sandbox escape vulnerability exists in the Widget: Win32 component of Mozilla Firefox and Thunderbird due to incorrect boundary conditions. This issue affects multiple versions of the browser and its email client. Remediation is available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , a...
CVE-2012-4212
Public technical details about CVE-2012-4212 are not disclosed in the provided documents. Monitoring for updates is advised.
CVE-2014-1560
CVE-2014-1560 affects Mozilla Firefox before 31.0 and Thunderbird before 31.0. The issue is in parsing X.509 certificates: a crafted certificate that does not use ASCII character encoding in a required context can trigger a denial of service. The vulnerability is triggered during certificate pars...
CVE-2025-10533
An integer overflow vulnerability exists in the SVG component of Mozilla Firefox , Firefox ESR , and Thunderbird . This flaw allows an attacker to potentially achieve remote code execution or cause a denial of service on the affected system. The vulnerability has been addressed in Firefox 143 , F...
CVE-2026-12326
The Firefox web browser and Thunderbird email client (versions 151) are affected by memory safety bugs involving operations that go beyond buffer boundaries in memory. These vulnerabilities can result in memory corruption , which could potentially be exploited by a remote attacker to achieve arbi...
CVE-2026-14899
Mozilla Thunderbird is vulnerable to an off-by-one error in the code used to parse MIME headers for display during message forwarding (active only if the setting to view all headers is enabled). This flaw allows a single byte to be read from memory following the header buffer, which could potenti...
CVE-2026-2778
CVE-2026-2778: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. Affected: Firefox (pre-148), Firefox ESR (pre-115.33/140.8); Thunderbird (pre-148, pre-140.8). Fixes: Firefox 148, ESR 115.33/140.8; Thunderbird 148/140.8. Practical impact: sandbox escape potent...
CVE-2026-2792
CVE-2026-2792 involves memory safety bugs found in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some flaws showed memory corruption indicators and could potentially be exploited to run arbitrary code; Mozilla fixed these in Firefox 148, Firefox ESR 140.8, Thunderbird...
CVE-2026-4692
This CVE (CVE-2026-4692) is a confirmed issue in the Responsive Design Mode component, leading to sandbox escape. The primary affected product is Mozilla Firefox (and related ESR builds) with versions prior to the fixed releases: Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9; Thunderbird...
CVE-2026-6757
The JavaScript: WebAssembly component in Mozilla Firefox , Firefox ESR , and the Thunderbird email client contains an invalid pointer vulnerability. This flaw relates to an uninitialized pointer , which a malicious actor could exploit to trigger a service failure or service interruptions. The vul...
CVE-2026-6774
A mitigation bypass exists in the DOM: Security component of Mozilla Firefox and Mozilla Thunderbird browsers/clients. The root cause is related to a flaw in data protection mechanisms , which could allow an attacker to bypass existing security restrictions remotely. This vulnerability was addres...
CVE-2026-74966
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74984
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-84145
This vulnerability involves internally found bugs in Mozilla Thunderbird and Mozilla Firefox . The defects may lead to memory corruption or other security-relevant issues, which could potentially be exploited with sufficient effort. Affected versions include Thunderbird 154 , Thunderbird ESR 153....
CVE-2026-92035
CVE-2026-92035 is a sandbox escape vulnerability in the Graphics component caused by incorrect boundary conditions. This flaw affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . Impactful remediation is available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbi...
CVE-2002-2436
CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...
CVE-2004-0761
CVE-2004-0761 affects Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. The vulnerability allows remote attackers to use certain redirect sequences to spoof the security lock icon, making a web page appear encrypted. This is documented with a CVSS base score of 5.0 (Network atta...
CVE-2004-0908
CVE-2004-0908 affects Mozilla Firefox (before the Preview Release), Mozilla (before 1.7.3), and Thunderbird (before 0.8). The issue allows untrusted JavaScript to read and write to the clipboard via script-generated events (e.g., Ctrl-Ins), potentially exposing sensitive information. The connecte...
CVE-2012-3983
CVE-2012-3983 affects Mozilla Firefox (pre-16.0), Thunderbird (pre-16.0), and SeaMonkey (pre-2.13). Reported memory safety vulnerabilities could cause memory corruption and crashes and potentially allow arbitrary code execution via unknown vectors. Remediation evidenced in connected documents inc...
CVE-2026-0884
A use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox , Firefox ESR , and Thunderbird . An attacker could exploit this flaw to execute arbitrary code on a system or cause service interruptions . The issue was resolved in Firefox 147 , Firefox ESR 140.7 , Thun...
CVE-2026-2760
CVE-2026-2760 is a Firefox/Thunderbird Firefox Graphics: WebRender sandbox escape caused by incorrect boundary conditions. Multiple public advisories confirm the issue and that it is fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Affected comp...
CVE-2026-2763
CVE-2026-2763 is a use-after-free in the JavaScript Engine component of Mozilla Firefox. The vulnerability affects Firefox and related ESR branches, and has been fixed in Firefox 148 and ESR versions 115.33, 140.8; Thunderbird 148/140.8 are also listed in fixed advisories. Connected sources corro...
CVE-2026-74942
A privilege escalation vulnerability exists in the Remote Settings Client component of the Firefox browser and Thunderbird mail client. The vulnerability affects multiple versions and has been addressed in Firefox 154 , Firefox ESR 115.39 , Firefox ESR 140.14 , Firefox ESR 153.1 , Thunderbird 154...
CVE-2026-84141
CVE-2026-84141 is an integer overflow in the Graphics: ImageLib component of Mozilla's image processing library, enabling remote code execution via crafted image content. The vulnerability affects Firefox (before 155), Firefox ESR (before 153.2), Thunderbird (before 155), and Thunderbird ESR (bef...
CVE-2026-8947
A use-after-free vulnerability exists in the DOM: Bindings (WebIDL) component of the Firefox browser and the Thunderbird email client. This memory safety issue allows a remote attacker to execute arbitrary code . The vulnerability has been addressed in Firefox 151 , Firefox ESR 115.36 , Firefox E...
CVE-2026-8958
A vulnerability in the Security: Process Sandboxing component of Firefox and Thunderbird allows for information disclosure and a sandbox escape . Exploiting this flaw can permit a remote attacker to access confidential data . The issue was addressed in Firefox 151 , Firefox ESR 140.11 , Thunderbi...
CVE-2012-0454
CVE-2012-0454 describes a use-after-free in Mozilla Firefox (including Firefox 4.x–10.0 and ESR 10.x before 10.0.3), Thunderbird 5.0–10.0, and SeaMonkey before 2.8 on 32-bit Windows 7. The issue arises when using the file-open dialog in a child window, related to IUnknown_QueryService in shlwapi....