1324 matches found
CVE-2016-9900
CVE-2016-9900 describes that data: URLs used by SVG images can bypass security restrictions, enabling cross-domain data leakage. Affected products include Mozilla Firefox (non-ESR) prior to 50.1, Firefox ESR prior to 45.6, and Thunderbird prior to 45.6. Root cause is the handling of external reso...
CVE-2018-5155
CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox
CVE-2022-46880
CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird
CVE-2016-9893
CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird
CVE-2022-29913
The CVE-2022-29913 vulnerability affects Thunderbird prior to version 91.9, caused by the parent process not properly checking if Speech Synthesis is enabled when handling commands from a child process. The issue is confirmed in multiple sources (e.g., CentOS/RH advisories and Astra Linux) and is...
CVE-2022-46878
CVE-2022-46878 corresponds to memory-safety bugs reported in Thunderbird 102.5 with some cases involving memory corruption; affected products include Firefox < 108, Firefox ESR < 102.6, and Thunderbird
CVE-2023-5732
CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...
CVE-2025-4919
CVE-2025-4919 describes an out-of-bounds read/write in JavaScript objects caused by confusing array index sizes, affecting Firefox including aliases (Firefox < 138.0.4, ESR < 128.10.1, ESR < 115.23.1) and Thunderbird (Thunderbird < 128.10.2; Thunderbird
CVE-2017-5373
Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2018-5154
CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR
CVE-2021-38510
CVE-2021-38510 describes a Mac‑OS specific flaw where the executable file warning was not shown when downloading .inetloc files, which can cause commands to run on a user’s computer. Affected products and versions from the provided documents: Mozilla Firefox (Mac) < 94, Thunderbird < 91.3, ...
CVE-2022-38478
CVE-2022-38478 refers to memory-safety bugs reported by the Mozilla Fuzzing Team affecting Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12, with potential for memory corruption and, with sufficient effort, arbitrary code execution. Affected products include Thunderbird (versions older than ...
CVE-2023-28162
CVE-2023-28162 affects Firefox <111, Firefox ESR <102.9, and Thunderbird
CVE-2017-5402
CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird
CVE-2018-12389
CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird
CVE-2019-11703
Summary (CVE-2019-11703) : A flaw in Thunderbird’s iCal handling causes a heap buffer overflow in libical’s parser_get_next_char, triggered by processing certain calendar-containing messages. The issue is documented to affect Thunderbird versions prior to 60.7.1, with public reports and advisorie...
CVE-2022-36314
CVE-2022-36314 affects Firefox on Windows (Windows shortcut handling). A local attacker could induce a user to open a local .lnk that supplies a remote path, causing the OS to make unexpected network requests. Affected: Firefox for Windows; Firefox ESR < 102.1; Firefox < 103; Thunderbird
CVE-2017-5443
The CVE-2017-5443 entry describes an out-of-bounds write during BinHex decoding that affects Mozilla products: Thunderbird before 52.1, Firefox ESR before 52.1, and Firefox before 53. The impact is memory corruption with potential crashes and possible arbitrary code execution. Upstream fixes are ...
CVE-2018-12361
CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...
CVE-2022-38472
The CVE-2022-38472 issue is a cross-origin spoofing vulnerability where XSLT error handling could allow attacker‑controlled content to be displayed as a different origin in the address bar, potentially tricking users into submitting data to a spoofed site. Affected products/versions (as stated in...
CVE-2017-5383
CVE-2017-5383 describes spoofing via specific Unicode glyphs used to alter the location bar content. The initial entry notes impact on Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2017-5396
CVE-2017-5396 describes a use-after-free vulnerability in the Media Decoder when handling media files, where certain events fire after the media elements are freed. The initial document indicates affected products include Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2017-7814
This CVE (CVE-2017-7814) affects Mozilla products (Firefox < 56, Firefox ESR < 52.4, Thunderbird
CVE-2018-5168
CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...
CVE-2023-25728
The CVE-2023-25728 entry describes a CSP-Report-Only header issue where an attacker could leak a child iframe’s unredacted URI during a redirect, affecting Firefox < 110, Thunderbird < 102.8, and Firefox ESR
CVE-2023-25737
CVE-2023-25737 describes an invalid downcast from nsTextNode to SVGElement that could lead to undefined behavior. The vulnerability is observed in Mozilla Firefox (versions before 110), Thunderbird (versions before 102.8), and Firefox ESR (versions before 102.8). Connected advisories consistently...
CVE-2014-1510
CVE-2014-1510 is a WebIDL-related remote code execution in Mozilla Firefox family (Firefox, Thunderbird, SeaMonkey) where an IDL fragment can trigger window.open with chrome privileges. Affected products and versions are Mozilla Firefox (pre-28.0 and ESR 24.x before 24.4 for some branches), Thund...
CVE-2016-9904
CVE-2016-9904 describes a timing-attack vulnerability in JavaScript Map/Set usage that can leak information across websites. Affected products include Firefox versions before 50.1, Firefox ESR before 45.6, and Thunderbird before 45.6. The issue enables an attacker to determine if an atom is used ...
CVE-2017-7801
CVE-2017-7801 is a use-after-free in marquee layout during window resize that frees the updated style object while still in use, potentially allowing a crash or exploit. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox
CVE-2012-5829
CVE-2012-5829 is a heap-based buffer overflow in the nsWindow::OnExposeEvent function affecting Mozilla Firefox before 17.0, Firefox ESR before 10.0.11, Thunderbird before 17.0, Thunderbird ESR before 10.0.11, and SeaMonkey before 2.14. Connected documents confirm this vulnerability across multip...
CVE-2019-11704
CVE-2019-11704 affects Mozilla Thunderbird via the libical-based iCal parser. It is a heap-based overflow in icalmemory_strdup_and_dequote (icalvalue.c) that can crash or be exploitable when processing calendar data in certain emails, affecting Thunderbird
CVE-2021-38505
The CVE describes a Windows 10 Cloud Clipboard issue where copied data could be recorded to the cloud if Cloud Clipboard is enabled. Affected products/versions identified are Firefox before 94, Thunderbird before 91.3, and Firefox ESR before 91.3 on Windows 10+. The root cause is that application...
CVE-2022-36319
CVE-2022-36319 involves a mouse position spoofing issue caused by combining CSS overflow and transform properties, affecting Firefox ESR and Thunderbird prior to certain fixed versions. Affected are Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thun...
CVE-2023-32215
CVE-2023-32215 refers to memory-safety bugs in Mozilla Firefox and Firefox ESR (112/ESR 102.10) with potential for arbitrary code execution. Affected are Firefox < 113, Firefox ESR < 102.11, and Thunderbird
CVE-2023-6204
CVE-2023-6204 describes an out-of-bounds read that can leak memory data into images created on the canvas element. The issue affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The available connected advisories corroborate the vulnerabilit...
CVE-2017-5447
CVE-2017-5447 is an out-of-bounds read in glyph widths processing during text layout that can cause a crash and potentially expose memory. Affected products include Mozilla Thunderbird (<52.1) and Mozilla Firefox/Firefox ESR (ESR <52.1; Firefox
CVE-2018-12379
CVE-2018-12379 describes an out-of-bounds write triggered when the Mozilla Updater opens a MAR file containing a very long item filename. This requires that the updater is run locally with the malicious MAR file, potentially allowing a crash exploitable by an attacker. Affected products include F...
CVE-2018-5125
CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox
CVE-2022-3034
CVE-2022-3034 describes a vulnerability in Mozilla Thunderbird where receiving an HTML email that requests loading an iframe from a remote location causes the browser to fetch the remote document, even though Thunderbird does not display it. The issue affects Thunderbird versions prior to 102.2.1...
CVE-2025-1937
CVE-2025-1937 summary (supported by connected documents): Memory‑safety bugs in Firefox and Thunderbird components led to potential arbitrary code execution risk for versions affected prior to 136 (Firefox/Thunderbird) and corresponding ESR lines. The advisories confirm affected products and patc...
CVE-2017-7819
CVE-2017-7819 is a use-after-free in the design mode image resizing path that can crash the process if referenced objects have been freed. The vulnerability affects Thunderbird < 52.4 and, per the cited records, Firefox < 56 and Firefox ESR
CVE-2025-3028
CVE-2025-3028 describes a use-after-free in memory handling when JavaScript runs during XSLTProcessor document transformation. Affected products include Firefox versions before 137 and Firefox ESR before 115.22/128.9, and Thunderbird versions before 137/128.9. Public advisories (e.g., ALAS2FIREFO...
CVE-2016-9895
CVE-2016-9895 affects Mozilla Firefox (<50.1) and Firefox ESR (<45.6) and Thunderbird (
CVE-2018-18509
CVE-2018-18509 is a S/MIME signature verification flaw in Mozilla Thunderbird that allows a remote attacker to reuse a valid S/MIME signature to craft emails with arbitrary content, making the message appear signed even though content isn’t covered by the signature. Affected products are Thunderb...
CVE-2019-11705
CVE-2019-11705 is a stack buffer overflow in Thunderbird’s libical-based icalrecur_add_bydayrules (affecting Thunderbird
CVE-2023-25729
CVE-2023-25729 involves a permissions prompt issue for external schemes that was only shown for ContentPrincipals, allowing extensions using ExpandedPrincipals to open them without user interaction. This could enable actions like downloading files or interacting with installed software. Affected:...
CVE-2023-32206
CVE-2023-32206: An out-of-bounds read in the RLBox Expat driver could crash affected Mozilla components. Affected software includes Firefox <113, Firefox ESR <102.11, and Thunderbird
CVE-2014-1490
CVE-2014-1490 : A race condition in NSS libssl session ticket processing (use-after-free) could allow remote attackers to cause a denial of service or, per the description, potentially other impact via a resumption handshake. Affected: NSS up to 3.15.4 and, by extension, Mozilla products (Firefox...
CVE-2017-5405
CVE-2017-5405: In Mozilla Firefox/Thunderbird the vulnerability arises from how certain FTP response codes are handled, causing uninitialized port values to be used in FTP operations. Connected advisories confirm this CVE is fixed in Thunderbird/Firefox branches around version 52 and ESR 45.8 (e....