CVE-2023-4576

CVE-2023-4576 affects Mozilla Firefox on Windows, where an integer overflow in RecordedSourceSurfaceCreation can cause a heap buffer overflow potentially leaking data and enabling sandbox escape. Affected products/versions listed include Firefox on Windows and Firefox/Thunderbird releases older t...

CVE-2018-12362

CVE-2018-12362 is an integer overflow in the SSSE3 scaler used during graphics operations, affecting Thunderbird and Firefox variants prior to specific versions (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2018-5188

CVE-2018-5188 involves memory safety bugs in Firefox 60/ESR 60 and Thunderbird

CVE-2018-12363

CVE-2018-12363 is a use-after-free vulnerability in Firefox/Thunderbird caused by mutation events moving DOM nodes between documents. The old document may be freed while a stale pointer remains, potentially enabling a crash. Public references show affected products include Thunderbird versions ol...

CVE-2018-5150

CVE-2018-5150 concerns memory safety bugs in Firefox 59/ESR 52.7 and Thunderbird 52.7, with potential memory corruption that could allow arbitrary code execution. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR

CVE-2022-3266

CVE-2022-3266 is an out-of-bounds read in H.264 video decoding that can trigger a crash. Affected products in the provided documents include Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox

CVE-2018-5089

CVE-2018-5089 is a memory-safety vulnerability affecting Mozilla products: Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2021-29982

CVE-2021-29982 affects Firefox and Thunderbird prior to version 91. Root cause: incorrect JIT optimization causing type confusion, leading to potential leakage of a single memory bit. Connected advisories confirm the issue and describe remediation as upgrading to Firefox/Thunderbird version 91 or...

CVE-2018-12364

The CVE-2018-12364 entry affects Thunderbird and was mitigated in various distributions through Thunderbird 52.9.1 and related security advisories. The connected documents confirm concrete details: NPAPI plugins (e.g., Flash) can bypass CORS by issuing a same-origin POST that redirects (307) to t...

CVE-2022-40962

CVE-2022-40962 is a memory safety issue in Firefox 104 and Firefox ESR 102.2 reported by Mozilla Fuzzing Team. The connected documents confirm memory corruption indicators and state that, with enough effort, some bugs could be exploited to run arbitrary code. The vulnerability affects Firefox ESR...

CVE-2019-11703

Summary (CVE-2019-11703) : A flaw in Thunderbird’s iCal handling causes a heap buffer overflow in libical’s parser_get_next_char, triggered by processing certain calendar-containing messages. The issue is documented to affect Thunderbird versions prior to 60.7.1, with public reports and advisorie...

CVE-2021-23993

CVE-2021-23993 affects Thunderbird: an attacker can cause encryption to fail by crafting an OpenPGP key with a subkey that has an invalid self-signature. When a user imports such a key, Thunderbird may attempt to use the invalid subkey, but the RNP library rejects it, leading to a DoS on sending ...

CVE-2021-38492

CVE-2021-38492 affects Mozilla Firefox on Windows, where delegating navigations to the OS could accept mk: URLs and load Internet Explorer in unprivileged mode. The vulnerability impacts Firefox versions older than 92 (and related Thunderbird/ ESR lines). Remediation is to upgrade to Firefox 92+ ...

CVE-2021-38502

Thunderbird is affected by CVE-2021-38502 where STARTTLS requirements for SMTP were ignored, enabling a MITM to downgrade to an unencrypted connection or hijack an authenticated session and potentially obtain credentials if unprotected methods are configured. Multiple connected advisories confirm...

CVE-2023-29541

The CVE-2023-29541 issue concerns Firefox on Linux (and Thunderbird) where downloads of files ending with .desktop could be interpreted as commands, enabling attacker-controlled execution. Public advisories show affected products as Firefox (Linux) older than 112, Thunderbird older than 102.10, a...

CVE-2022-34472

CVE-2022-34472 : If a PAC URL is configured and the PAC host is unreachable, OCSP requests are blocked, leading to incorrect error pages being shown. Affected: Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, Thunderbird

CVE-2018-12359

CVE-2018-12359 is a buffer overflow in rendering canvas content when dynamically adjusting the height/width, potentially causing a crash. Affected: Thunderbird and Firefox variants (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2021-38495

CVE-2021-38495 relates to memory safety bugs reported in Mozilla Thunderbird 78.13.0, with evidence of memory corruption and the possibility that, with effort, exploit could lead to arbitrary code execution. The vulnerability affects Thunderbird < 91.1 and Firefox ESR

CVE-2018-12366

CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...

CVE-2020-15648

CVE-2020-15648 involves a framing bypass: using object/embed tags could frame other sites even if X-Frame-Options blocks framing. Affected: Firefox < 78.0.2 and Thunderbird

CVE-2022-31742

CVE-2022-31742 describes a timing-attack flaw in WebAuthn: an attacker could send many allowCredential entries and distinguish valid vs invalid key handles, enabling cross-origin account linking. Affected products in the provided records are Thunderbird < 91.10, Firefox < 101, and Firefox ESR

CVE-2022-34481

The CVE-2022-34481 entry describes an integer overflow in nsTArray_Impl::ReplaceElementsAt() that could occur when replacing too many elements, affecting Firefox <102, Firefox ESR <91.11, Thunderbird <102, and Thunderbird

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2025-4919

Mozilla Firefox and Thunderbird are affected by an out-of-bounds read or write vulnerability in a JavaScript object . The root cause is triggered by confusing array index sizes during operations. This security flaw could potentially lead to memory corruption. Remediation is available in Firefox 1...

CVE-2018-12377

CVE-2018-12377 is a use-after-free vulnerability that can occur when refresh driver timers are refreshed during shutdown, potentially causing a crash when the timer is deleted while still in use. The issue affects Thunderbird versions prior to 60.2.1 (and related Firefox/ESR components). The docu...

CVE-2023-32207

CVE-2023-32207 describes a missing delay in popup notifications that could let an attacker trick a user into granting permissions. Affected software includes Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2022-46874

CVE-2022-46874 describes a filename truncation issue where a long filename could lose its valid extension, leaving a malicious extension that could confuse users or lead to execution of malicious code. Public reports indicate affected products include Firefox versions before 108 and Thunderbird v...

CVE-2018-12378

CVE-2018-12378 is a use-after-free in Thunderbird/Firefox related to deleting an IndexedDB index while it is still in use by JavaScript, causing a potentially exploitable crash. Affected: Thunderbird

CVE-2017-5380

CVE-2017-5380 is a use-after-free vulnerability related to SVG content processing. Connected IBM advisories confirm this CVE ID is present and tie it to vulnerabilities in Mozilla Firefox shipped with IBM Storwize V7000 Unified and IBM SONAS. Affected IBM products and versions are IBM Storwize V7...

CVE-2018-12383

CVE-2018-12383 describes an information disclosure in Thunderbird (and Firefox components) where, if a user saved passwords before migrating to the new password format (pre-Firefox 58) and later set a master password, an unencrypted copy of those passwords could remain accessible because the lega...

CVE-2019-11705

CVE-2019-11705 is a stack buffer overflow in Thunderbird’s libical-based icalrecur_add_bydayrules (affecting Thunderbird

CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...

CVE-2022-40959

The CVE-2022-40959 entry corresponds to a Mozilla vulnerability where during iframe navigation, FeaturePolicy was not fully initialized, allowing a bypass that leaked device permissions to untrusted subdocuments. Affected products include Firefox ESR before 102.3, Thunderbird before 102.3, and Fi...

CVE-2018-5117

CVE-2018-5117 describes a URL spoofing issue where, when right-to-left text is used in the address bar with left-to-right alignment, the displayed URL can be scrolled to mislead users about the actual site. The vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2017-5378

CVE-2017-5378 involves hashed codes of JavaScript objects enabling pointer leaks and potential data leakage. The vulnerability affects Mozilla products as noted in connected sources: Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2019-17009

CVE-2019-17009 affects Mozilla Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox

CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

CVE-2025-1937

Memory safety bugs in Firefox and Thunderbird (including ESR versions) can lead to memory corruption . If exploited, these vulnerabilities could allow an attacker to run arbitrary code . This issue affects Firefox versions prior to 136 , Firefox ESR versions prior to 115.21 and 128.8 , Thunderbir...

CVE-2018-5097

CVE-2018-5097 is a use-after-free vulnerability in XSL transformations where the source document is manipulated by script content during transformation. Affected products include Mozilla Thunderbird and Firefox variants prior to version 52.6/58, with upstream fixes targeting Thunderbird 52.6.0 (a...

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

CVE-2018-12385

CVE-2018-12385 describes a potentially exploitable crash in TransportSecurityInfo used for SSL, triggered by data stored in the local cache within the user profile. Affected products include Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird

CVE-2018-5156

The CVE-2018-5156 entry describes a vulnerability in media capture: when the media source type is changed during capture, stream data can be cast to the wrong type, causing a crash. Affected products include Thunderbird

CVE-2018-5159

CVE-2018-5159 describes an integer overflow in the Skia library caused by 32-bit integer use in an array without bounds checks, leading to out-of-bounds writes. This can crash web content and is potentially exploitable. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, F...

CVE-2022-45410

CVE-2022-45410 : When a ServiceWorker intercepted a request with a FetchEvent, the origin of the request could be lost after the ServiceWorker took ownership, negating SameSite cookie protections. Affected: Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2018-5155

CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox