CVE-2019-11703

Summary (CVE-2019-11703) : A flaw in Thunderbird’s iCal handling causes a heap buffer overflow in libical’s parser_get_next_char, triggered by processing certain calendar-containing messages. The issue is documented to affect Thunderbird versions prior to 60.7.1, with public reports and advisorie...

CVE-2022-46881

CVE-2022-46881 is a memory safety issue in WebGL where an optimization could cause memory corruption and a potentially exploitable crash. Affected products per provided sources are Firefox releases before 106, Firefox ESR before 102.6, and Thunderbird before 102.6. The root cause is a WebGL optim...

CVE-2016-9900

CVE-2016-9900 describes that data: URLs used by SVG images can bypass security restrictions, enabling cross-domain data leakage. Affected products include Mozilla Firefox (non-ESR) prior to 50.1, Firefox ESR prior to 45.6, and Thunderbird prior to 45.6. Root cause is the handling of external reso...

CVE-2017-5373

Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5460

CVE-2017-5460 is a use-after-free in Firefox/Thunderbird frame selection. Public docs confirm it affects Firefox/Firefox ESR (before 53) and Thunderbird (older branches) with a potentially exploitable crash and, in some advisories, possible arbitrary code execution. Root cause: use-after-free dur...

CVE-2018-5154

CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR

CVE-2023-25728

The CVE-2023-25728 entry describes a CSP-Report-Only header issue where an attacker could leak a child iframe’s unredacted URI during a redirect, affecting Firefox < 110, Thunderbird < 102.8, and Firefox ESR

CVE-2017-5402

CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird

CVE-2018-12361

CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...

CVE-2018-5168

CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...

CVE-2022-46878

CVE-2022-46878 corresponds to memory-safety bugs reported in Thunderbird 102.5 with some cases involving memory corruption; affected products include Firefox < 108, Firefox ESR < 102.6, and Thunderbird

CVE-2023-5732

CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...

CVE-2021-38510

CVE-2021-38510 describes a Mac‑OS specific flaw where the executable file warning was not shown when downloading .inetloc files, which can cause commands to run on a user’s computer. Affected products and versions from the provided documents: Mozilla Firefox (Mac) < 94, Thunderbird < 91.3, ...

CVE-2022-29913

The CVE-2022-29913 vulnerability affects Thunderbird prior to version 91.9, caused by the parent process not properly checking if Speech Synthesis is enabled when handling commands from a child process. The issue is confirmed in multiple sources (e.g., CentOS/RH advisories and Astra Linux) and is...

CVE-2022-38478

CVE-2022-38478 refers to memory-safety bugs reported by the Mozilla Fuzzing Team affecting Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12, with potential for memory corruption and, with sufficient effort, arbitrary code execution. Affected products include Thunderbird (versions older than ...

CVE-2019-11704

CVE-2019-11704 affects Mozilla Thunderbird via the libical-based iCal parser. It is a heap-based overflow in icalmemory_strdup_and_dequote (icalvalue.c) that can crash or be exploitable when processing calendar data in certain emails, affecting Thunderbird

CVE-2025-4919

CVE-2025-4919 describes an out-of-bounds read/write in JavaScript objects caused by confusing array index sizes, affecting Firefox including aliases (Firefox < 138.0.4, ESR < 128.10.1, ESR < 115.23.1) and Thunderbird (Thunderbird < 128.10.2; Thunderbird

CVE-2016-9904

CVE-2016-9904 describes a timing-attack vulnerability in JavaScript Map/Set usage that can leak information across websites. Affected products include Firefox versions before 50.1, Firefox ESR before 45.6, and Thunderbird before 45.6. The issue enables an attacker to determine if an atom is used ...

CVE-2017-5443

The CVE-2017-5443 entry describes an out-of-bounds write during BinHex decoding that affects Mozilla products: Thunderbird before 52.1, Firefox ESR before 52.1, and Firefox before 53. The impact is memory corruption with potential crashes and possible arbitrary code execution. Upstream fixes are ...

CVE-2017-5447

CVE-2017-5447 is an out-of-bounds read in glyph widths processing during text layout that can cause a crash and potentially expose memory. Affected products include Mozilla Thunderbird (<52.1) and Mozilla Firefox/Firefox ESR (ESR <52.1; Firefox

CVE-2023-28162

CVE-2023-28162 affects Firefox <111, Firefox ESR <102.9, and Thunderbird

CVE-2023-32215

CVE-2023-32215 refers to memory-safety bugs in Mozilla Firefox and Firefox ESR (112/ESR 102.10) with potential for arbitrary code execution. Affected are Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2017-5383

CVE-2017-5383 describes spoofing via specific Unicode glyphs used to alter the location bar content. The initial entry notes impact on Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5396

CVE-2017-5396 describes a use-after-free vulnerability in the Media Decoder when handling media files, where certain events fire after the media elements are freed. The initial document indicates affected products include Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2018-12389

CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2022-3034

CVE-2022-3034 describes a vulnerability in Mozilla Thunderbird where receiving an HTML email that requests loading an iframe from a remote location causes the browser to fetch the remote document, even though Thunderbird does not display it. The issue affects Thunderbird versions prior to 102.2.1...

CVE-2022-36314

CVE-2022-36314 affects Firefox on Windows (Windows shortcut handling). A local attacker could induce a user to open a local .lnk that supplies a remote path, causing the OS to make unexpected network requests. Affected: Firefox for Windows; Firefox ESR < 102.1; Firefox < 103; Thunderbird

CVE-2017-7801

CVE-2017-7801 is a use-after-free in marquee layout during window resize that frees the updated style object while still in use, potentially allowing a crash or exploit. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2018-12379

CVE-2018-12379 describes an out-of-bounds write triggered when the Mozilla Updater opens a MAR file containing a very long item filename. This requires that the updater is run locally with the malicious MAR file, potentially allowing a crash exploitable by an attacker. Affected products include F...

CVE-2018-18509

CVE-2018-18509 is a S/MIME signature verification flaw in Mozilla Thunderbird that allows a remote attacker to reuse a valid S/MIME signature to craft emails with arbitrary content, making the message appear signed even though content isn’t covered by the signature. Affected products are Thunderb...

CVE-2012-5829

CVE-2012-5829 is a heap-based buffer overflow in the nsWindow::OnExposeEvent function affecting Mozilla Firefox before 17.0, Firefox ESR before 10.0.11, Thunderbird before 17.0, Thunderbird ESR before 10.0.11, and SeaMonkey before 2.14. Connected documents confirm this vulnerability across multip...

CVE-2018-12367

CVE-2018-12367 affects Mozilla Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2019-11705

CVE-2019-11705 is a stack buffer overflow in Thunderbird’s libical-based icalrecur_add_bydayrules (affecting Thunderbird

CVE-2019-11706

CVE-2019-11706 is a type confusion in Thunderbird’s libical implementation, specifically icaltimezone_get_vtimezone_properties, triggered by certain emails and leading to a crash in Thunderbird

CVE-2022-38472

The CVE-2022-38472 issue is a cross-origin spoofing vulnerability where XSLT error handling could allow attacker‑controlled content to be displayed as a different origin in the address bar, potentially tricking users into submitting data to a spoofed site. Affected products/versions (as stated in...

CVE-2021-38505

The CVE describes a Windows 10 Cloud Clipboard issue where copied data could be recorded to the cloud if Cloud Clipboard is enabled. Affected products/versions identified are Firefox before 94, Thunderbird before 91.3, and Firefox ESR before 91.3 on Windows 10+. The root cause is that application...

CVE-2022-36319

CVE-2022-36319 involves a mouse position spoofing issue caused by combining CSS overflow and transform properties, affecting Firefox ESR and Thunderbird prior to certain fixed versions. Affected are Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thun...

CVE-2023-32206

CVE-2023-32206: An out-of-bounds read in the RLBox Expat driver could crash affected Mozilla components. Affected software includes Firefox <113, Firefox ESR <102.11, and Thunderbird

CVE-2023-5727

CVE-2023-5727 affects Mozilla Firefox and Thunderbird prior to certain versions. The vulnerability arises when downloading Windows app packages (.msix, .msixbundle, .appx, .appxbundle): the executable file warning was not presented, potentially allowing commands to run on a user’s machine. Affect...

CVE-2023-6204

CVE-2023-6204 describes an out-of-bounds read that can leak memory data into images created on the canvas element. The issue affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The available connected advisories corroborate the vulnerabilit...

CVE-2025-1937

CVE-2025-1937 summary (supported by connected documents): Memory‑safety bugs in Firefox and Thunderbird components led to potential arbitrary code execution risk for versions affected prior to 136 (Firefox/Thunderbird) and corresponding ESR lines. The advisories confirm affected products and patc...

CVE-2017-5405

CVE-2017-5405: In Mozilla Firefox/Thunderbird the vulnerability arises from how certain FTP response codes are handled, causing uninitialized port values to be used in FTP operations. Connected advisories confirm this CVE is fixed in Thunderbird/Firefox branches around version 52 and ESR 45.8 (e....

CVE-2022-36318

CVE-2022-36318 involves directory listings for chrome:// URLs where some URL parameters were reflected. The connected documents show affected products: Firefox (including ESR lines) and Thunderbird, across multiple distributions. The underlying issue is reflected parameters in directory indexes f...

CVE-2022-38477

CVE-2022-38477 concerns memory safety bugs reported by Mozilla’s Fuzzing Team in Firefox 103 and Firefox ESR 102.1. The entry notes evidence of memory corruption and a presumption that, with sufficient effort, some bugs could be exploited to execute arbitrary code. Affected products explicitly li...

CVE-2022-40959

The CVE-2022-40959 entry corresponds to a Mozilla vulnerability where during iframe navigation, FeaturePolicy was not fully initialized, allowing a bypass that leaked device permissions to untrusted subdocuments. Affected products include Firefox ESR before 102.3, Thunderbird before 102.3, and Fi...

CVE-2023-25737

CVE-2023-25737 describes an invalid downcast from nsTextNode to SVGElement that could lead to undefined behavior. The vulnerability is observed in Mozilla Firefox (versions before 110), Thunderbird (versions before 102.8), and Firefox ESR (versions before 102.8). Connected advisories consistently...

CVE-2023-29550

CVE-2023-29550 corresponds to memory-safety bugs in Mozilla Firefox 111 and Firefox ESR 102.9 (affecting Firefox < 112, Focus for Android < 112, ESR < 102.10, Firefox for Android < 112, Thunderbird

CVE-2016-9074

CVE-2016-9074: Mozilla NSS timing-side-channel mitigation is insufficient in some circumstances. Affects NSS-based components used by Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox

CVE-2016-9895

CVE-2016-9895 affects Mozilla Firefox (<50.1) and Firefox ESR (<45.6) and Thunderbird (