CVE-2019-9792

The CVE-2019-9792 issue is an IonMonkey JIT leak in Firefox/Thunderbird where the JS_OPTIMIZED_OUT magic value is leaked during bailout, enabling memory corruption and potentially a crash. Affected: Thunderbird < 60.6, Firefox ESR < 60.6, Firefox

CVE-2024-5700

This vulnerability involves memory safety bugs affecting Firefox , Firefox ESR , and Thunderbird . The issues manifest as memory corruption , which could potentially be exploited to execute arbitrary code with sufficient effort. Affected versions include Firefox < 127 , Firefox ESR < 115.12...

CVE-2020-6811

CVE-2020-6811 concerns Mozilla Firefox/Thunderbird where Devtools Network tab’s Copy as cURL did not properly escape the HTTP method. The underlying issue could allow command injection if the generated curl command is pasted into a terminal. Public advisories indicate affected products include Th...

CVE-2023-23598

CVE-2023-23598 describes an Arbitrary file read via GTK drag-and-drop in Firefox/Thunderbird where the GTK wrapper uses text/plain for drag data; GTK treats text/plain MIMEs with file URLs as dragged, enabling DataTransfer.setData to read local files. Affected versions: Firefox < 109, Firefox ...

CVE-2024-2607

This vulnerability affects Firefox < 124 , Firefox ESR < 115.9 , and Thunderbird

CVE-2024-11694

The Google SafeFrame shim within the Web Compatibility extension contains a vulnerability where Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based XSS . This flaw could expose users to malicious frames masquerading as legitimate content. Affect...

CVE-2025-0242

Mozilla Firefox and Thunderbird are affected by memory safety bugs that can lead to memory corruption . If exploited, these vulnerabilities could allow an attacker to execute arbitrary code . The issue impacts the following versions: Firefox 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird...

CVE-2021-23994

CVE-2021-23994 describes a WebGL-related memory corruption due to a framebuffer not initialized early enough, causing an out-of-bounds write. Affected products are Firefox ESR versions earlier than 78.10, Thunderbird versions earlier than 78.10, and Firefox versions earlier than 88. The root caus...

CVE-2021-29991

CVE-2021-29991 affects Mozilla Firefox and Mozilla Thunderbird. The issue arises when Firefox incorrectly accepts a newline in an HTTP/3 header, treating it as two separate headers, enabling a header-splitting scenario for servers using HTTP/3. Affected versions are Firefox < 91.0.1 and Thunde...

CVE-2024-10464

This vulnerability affects Firefox < 132 , Firefox ESR < 128.4 , Thunderbird < 128.4 , and Thunderbird

CVE-2024-4770

A use-after-free vulnerability exists in Firefox , Firefox ESR , and Thunderbird when saving a page to PDF. The flaw is triggered by specific font styles , which could lead to a crash . This affects Firefox < 126 , Firefox ESR < 115.11 , and Thunderbird

CVE-2024-7519

CVE-2024-7519 describes memory corruption due to insufficient checks when processing graphics shared memory, enabling sandbox escape. Affected products include Firefox <129, Firefox ESR <115.14, Firefox ESR <128.1, Thunderbird <128.1, and Thunderbird

CVE-2024-6602

A mismatch between allocator and deallocator could lead to memory corruption in affected software. This vulnerability impacts Firefox < 128 , Firefox ESR < 115.13 , Thunderbird < 115.13 , and Thunderbird

CVE-2021-29970

CVE-2021-29970 concerns a use-after-free/memory corruption issue triggered by a malicious webpage when accessibility is enabled. Affected products include Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox

CVE-2021-29989

CVE-2021-29989 covers memory safety bugs in Firefox 90/ESR 78.12 that could lead to memory corruption and potentially arbitrary code execution; affected products include Thunderbird <78.13, Firefox ESR <78.13, and Firefox

CVE-2024-5688

A use-after-free vulnerability exists in Firefox and Thunderbird due to a race condition where garbage collection can trigger during an object transplant . This issue affects Firefox < 127 , Firefox ESR < 115.12 , and Thunderbird

CVE-2024-6600

A memory corruption vulnerability in the WebGL API of Mozilla Firefox (and associated products) allows a remote attacker to trigger an out-of-bounds access . The root cause is due to Angle for GLSL shaders having lenient allocation checks when allocating more than 8192 integers in private shader ...

CVE-2025-1010

A use-after-free vulnerability exists in the Custom Highlight API component of Mozilla Firefox , Firefox ESR , and Thunderbird . An attacker could exploit this flaw to cause a potentially exploitable crash or service failure. This issue affects Firefox versions prior to 135 , Firefox ESR versions...

CVE-2019-11744

CVE-2019-11744 concerns an XSS in HTML elements such as and where literal angle brackets can be left unescaped, allowing a crafted closing tag to be injected via innerHTML and make subsequent content appear outside the tag. Affected products include Firefox (versions before 69), Thunderbird (be...

CVE-2024-9393

Summary: CVE-2024-9393 describes a cross-origin JavaScript execution in PDFs via a crafted multipart response, allowing access to cross-origin content under the resource://pdf.js origin. Affected software (from provided docs): Mozilla Firefox and Thunderbird (including ESR branches). Desktop Site...

CVE-2020-12397

CVE-2020-12397 affects Mozilla Thunderbird. By encoding Unicode whitespace characters within the From header, an attacker could spoof the sender email address displayed by Thunderbird. It impacts Thunderbird versions older than 68.8.0. The connected sources confirm this as part of a set of relate...

CVE-2019-9820

The CVE-2019-9820 issue is a use-after-free in the ChromeEventHandler by DocShell that can cause a crash in Thunderbird and Firefox (including ESR). Affected products and versions, per sources: Thunderbird < 60.7, Firefox < 67, and Firefox ESR

CVE-2020-15669

CVE-2020-15669 details (concrete): A use-after-free bug occurs when aborting an operation (e.g., fetch) where an abort signal is deleted while alerting observers, potentially allowing arbitrary code execution. Affected products include Firefox ESR versions earlier than 68.12 and Thunderbird versi...

CVE-2021-23969

The CVE-2021-23969 entry concerns a Content Security Policy (CSP) violation report handling issue in Firefox and related Mozilla products. Affected components: Firefox (and Thunderbird) CSP violation reporting when redirects occur. Root cause: during certain redirects, the reporter could set the ...

CVE-2019-11713

CVE-2019-11713 is a use-after-free in HTTP/2 when a cached stream is closed while still in use, leading to a potentially exploitable crash. Affected products include Firefox ESR < 60.8, Firefox < 68, and Thunderbird

CVE-2020-6798

CVE-2020-6798 involves incorrect parsing when a template tag is used inside a select tag, enabling JavaScript injection under browser-like contexts. The vulnerability affects Thunderbird versions prior to 68.5 (and Firefox before 73 / ESR 68.5); exploitation is discussed in the context of cross-s...

CVE-2024-2605

An attacker could leverage the Windows Error Reporter to execute arbitrary code on the system while escaping the sandbox. This vulnerability specifically affects Windows operating systems and impacts Firefox < 124 , Firefox ESR < 115.9 , and Thunderbird

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could lead to an out-of-bounds write and memory corruption . This vulnerability stems from a flaw in Apple's GPU driver and specifically affects the application when running on Apple M series hardware ; other platforms remain unaffected. ...

CVE-2024-6606

A vulnerability in the clipboard code of Firefox and Thunderbird allows for an out-of-bounds read because the software fails to verify the index during an array access. This flaw affects versions of Firefox and Thunderbird older than 128 . No specific exploit information or remediation details ar...

CVE-2024-6615

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird

CVE-2024-9392

A compromised content process in Firefox and Thunderbird could allow for the arbitrary loading of cross-origin pages . This vulnerability affects Firefox < 131 , Firefox ESR < 128.3 , Firefox ESR < 115.16 , Thunderbird < 128.3 , and Thunderbird

CVE-2019-11691

CVE-2019-11691 is a use-after-free vulnerability in XMLHttpRequest (XHR) triggered by an event loop, causing the XHR main thread to be invoked after the object is freed. Affects Thunderbird versions < 60.7 and Firefox/Firefox ESR versions

CVE-2023-25735

CVE-2023-25735 describes a use-after-free caused by cross-compartment wrappers wrapping a scripted proxy, which could cause objects from other compartments to be stored in the main compartment during unwrapping. Affected products include Firefox <110, Thunderbird <102.8, and Firefox ESR

CVE-2024-6601

A race condition in permission assignment allows a cross-origin container to obtain the permissions of the top-level origin . This vulnerability affects Firefox (versions < 128 and ESR < 115.13), Thunderbird (versions < 115.13 and

CVE-2024-10458

CVE-2024-10458 describes a permission leak from a trusted site to an untrusted site via embed/object in Firefox and Thunderbird. Affected products and ranges shown in the connected documents include Firefox and Thunderbird before 132 (and ESR before 128.4/115.17 for Firefox, and Thunderbird befor...

CVE-2025-0247

Mozilla Firefox and Thunderbird versions prior to 134 are affected by memory safety bugs. The root cause involves copying buffers without checking the size of the input data , which can lead to memory corruption . A malicious actor could potentially exploit these flaws to execute arbitrary code t...

CVE-2024-2612

This vulnerability affects Firefox versions < 124, Firefox ESR < 115.9, and Thunderbird

CVE-2019-11752

CVE-2019-11752 is a use-after-free in IndexedDB: deleting a key value during conversion may allow a crash and potential exploitation. Affected products include Firefox versions before 69 and Thunderbird versions before 68.1/60.9 (and corresponding ESR lines). Several connected advisories note fix...

CVE-2021-29946

CVE-2021-29946 affects Firefox/Thunderbird components where ports written as an integer overflow beyond 16-bit bounds could bypass port blocking when used in the Alt-Svc header. Connected advisories show the issue is labeled as port blocking bypass (access restriction bypass) with remediation via...

CVE-2016-9905

CVE-2016-9905 is tied to a crash in EnumerateSubDocuments when adding or removing sub-documents, affecting Thunderbird and Firefox ESR prior to 45.6. The connected sources consistently identify a crash/memory safety context (e.g., use-after-free and memory corruption patterns across related CVEs)...

CVE-2020-6821

CVE-2020-6821: WebGL copyTexSubImage reads outside the source resource; memory that should be zero is uninitialized, enabling potential data disclosure. Affected products include Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox

CVE-2024-5690

Vulnerability CVE-2024-5690 affects Mozilla Firefox and Thunderbird components via a timing-attack on external protocol handler detection. Affected products explicitly include Firefox < 127, Firefox ESR < 115.12, and Thunderbird

CVE-2024-5696

CVE-2024-5696 is a Memory Corruption vulnerability affecting Firefox (versions < 127), Firefox ESR (versions < 115.12), and Thunderbird (versions < 115.12). The issue is caused by manipulating text within an tag, which can result in corrupt memory and a potentially exploitable crash . T...

CVE-2019-9790

CVE-2019-9790 is a use-after-free vulnerability triggered when a raw pointer to a DOM element is obtained via JavaScript and the element is removed while still in use. Affected products include Thunderbird (<60.6), Firefox ESR (<60.6), and Firefox (

CVE-2024-7528

A use-after-free vulnerability exists in IndexedDB due to an incorrect garbage collection interaction . This flaw impacts Firefox versions earlier than 129, Firefox ESR versions earlier than 128.1, and Thunderbird versions earlier than 128.1. The vulnerability could lead to memory corruption. No ...

CVE-2024-10459

CVE-2024-10459 is a use-after-free vulnerability triggered when accessibility features are enabled, potentially causing a crash. The issue affects Firefox versions earlier than 132, Firefox ESR prior to 128.4 and 115.17, and Thunderbird versions earlier than 132 or 128.4, as noted across multiple...

CVE-2024-5691

The CVE-2024-5691 entry describes a vulnerability where an attacker could trick a sandboxed iframe using an X-Frame-Options header to present a button that, if clicked, bypasses sandbox restrictions and opens a new window. Affected products (per the provided documents) include Mozilla Firefox and...

CVE-2021-38503

The CVE-2021-38503 issue: the iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. Affected products include Firefox (versions before 94), Thunderbird (before 91.3), and Firefox ...

CVE-2020-26965

CVE-2020-26965 is a browser/password-input issue affecting Firefox (including ESR) versions older than 83/78.5 and Thunderbird older than 78.5. The problem arises when a user’s password is revealed via a “Show Password” control, and, in conjunction with a software keyboard that remembers input, t...

CVE-2021-23999

CVE-2021-23999 describes a sandbox/privilege issue where a Blob URL loaded via an unusual user interaction could be executed with System Principal privileges, affecting Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox