CVE-2024-0741

CVE-2024-0741 describes an out-of-bounds write in ANGLE that could corrupt memory and cause a potentially exploitable crash. Affected software includes Firefox up to version 121/122 and Firefox ESR up to 115.7, as well as Thunderbird up to 115.7. The connected advisories indicate the root cause i...

CVE-2009-2408

CVE-2009-2408 affects Mozilla NSS up to 3.12.2/Firefox up to 3.0.12/ Thunderbird up to 2.0.0.22 and SeaMonkey up to 1.1.17. The issue is improper handling of a '\0' character in the domain name present in the certificate subject’s Common Name (CN) field of an X.509 certificate. This enables a man...

CVE-2013-0753

CVE-2013-0753 is a Use‑after‑free vulnerability in Mozilla Firefox’s XMLSerializer.serializeToStream, affecting Firefox before 18.0 (and ESR/Thunderbird/SeaMonkey variants) and allowing remote code execution via crafted content. The issue is exploitable as part of Firefox 17.x lineage; Metasploit...

CVE-2018-12392

CVE-2018-12392 is a vulnerability affecting Firefox (pre-63 and ESR pre-60.3) and Thunderbird (pre-60.3) where manipulating user events in nested loops while opening a document via script can trigger a crash due to poor event handling. Public advisories list the impact as a potentially exploitabl...

CVE-2020-15670

CVE-2020-15670 involves memory safety bugs in Mozilla Firefox components, affecting Firefox for Android 79 and other Firefox variants prior to 80, including Firefox ESR < 78.2 and Thunderbird

CVE-2020-12398

CVE-2020-12398 affects Mozilla Thunderbird when STARTTLS is used for IMAP and the server sends PREAUTH, causing Thunderbird to proceed with an unencrypted connection and expose email data. Impact is described as information leakage due to unencrypted transmission; affected versions are Thunderbir...

CVE-2023-4581

CVE-2023-4581 covers a blocklist gap where Excel .xll add-in files could be downloaded without warnings due to Firefox’s executable blocklist lacking an entry. Affected products/versions shown in the documents: Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 10...

CVE-2023-4580

CVE-2023-4580 : Pushed notifications stored on disk in private browsing mode were not encrypted, potentially leaking sensitive information. Affected: Firefox < 117, Firefox ESR < 115.2, Thunderbird

CVE-2023-5168

CVE-2023-5168 refers to a vulnerability in Firefox on Windows where a compromised content process could supply malicious data to FilterNodeD2D1, causing an out-of-bounds write and potentially crashing a privileged process. The entry notes a high/critical risk with a base score of 9.8 (CVSSv3.1) a...

CVE-2017-5436

CVE-2017-5436 is an out-of-bounds write in the Graphite 2 library triggered by a malicious Graphite font, causing a potentially exploitable crash. The issue was fixed in Graphite 2 and in Mozilla products; affected Mozilla components include Thunderbird < 52.1, Firefox ESR < 45.9 and < 5...

CVE-2019-11755

CVE-2019-11755 affects Mozilla Thunderbird. A crafted S/MIME message can be shown as having a valid signature when the inner encryption layer is present and the signer did not access the message contents, enabling spoofing of the message author. The issue is tied to Thunderbird versions prior to ...

CVE-2020-15676

CVE-2020-15676 affects Firefox (and related Mozilla products) where the onload handler for SVG elements could run after the DOM sanitizer removed content, enabling JavaScript execution when pasting attacker-controlled data into a contenteditable area. Affected versions: Firefox < 81, Thunderbi...

CVE-2023-3417

CVE-2023-3417 affects Mozilla Thunderbird. The issue arises from the Text Direction Override Unicode Character in filenames, which could cause an email attachment to appear as a non-executable document when it was actually an executable. Affected: Thunderbird versions before 115.0.1 and before 10...

CVE-2023-5728

CVE-2023-5728 : In the Firefox/Thunderbird stack, during garbage collection extra operations on an object that should not be touched could lead to a potentially exploitable crash. Affected: Firefox < 119, Firefox ESR < 115.4, and Thunderbird

CVE-2023-4578

CVE-2023-4578 affects Firefox and Thunderbird: a failure in JS::CheckRegExpSyntax could mishandle an out-of-memory (OOM) condition as a Syntax Error, potentially leading to crashes. Affected versions are Firefox < 117, Firefox ESR < 115.2, and Thunderbird

CVE-2023-4583

CVE-2023-4583 concerns a logic issue in the HTTP/Browsing Context handling within Mozilla Firefox/Thunderbird. The flaw occurs when HttpBaseChannel checks whether a Browsing Context has been discarded; if the load group is unavailable, it may assume discard even for private channels after a priva...

CVE-2023-4573

The CVE-2023-4573 issue is a memory corruption/use-after-free in Mozilla's IPC path (mStream) that can be triggered when rendering data is received via IPC. Connected documents confirm affected products include Firefox and Thunderbird (multiple ESR branches) with vulnerable components tied to IPC...

CVE-2021-38497

CVE-2021-38497 describes a UI spoofing issue caused by using reportValidity() together with window.open(), which could overlay a plain-text validation message on another origin. Affected software versions are Firefox < 93, Thunderbird < 91.2, and Firefox ESR

CVE-2013-0758

CVE-2013-0758 affects Mozilla Firefox (pre-18.0), Firefox ESR (pre-10.0.12 and pre-17.0.2), Thunderbird (pre-17.0.2, including ESR 10.x pre-10.0.12 and pre-17.0.2), and SeaMonkey (pre-2.15). It allows remote attackers to execute arbitrary JavaScript with chrome privileges due to improper interact...

CVE-2023-29536

The CVE-2023-29536 entry applies to Mozilla products (Firefox, Focus, Thunderbird, Firefox ESR, and Firefox for Android) with memory-management weakness in freeing a pointer to attacker-controlled memory. Impacted versions include Firefox <112, Focus for Android <112, Firefox ESR <102.10...

CVE-2019-11739

CVE-2019-11739 affects Mozilla Thunderbird; encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a HTML reply/forward. Affected versions: Thunderbird < 68.1 and Thunderbird

CVE-2019-9801

CVE-2019-9801 affects Mozilla Firefox and Thunderbird on Windows. The issue allows Firefox/Thunderbird to treat any registered Program ID as an external protocol handler and offer to launch a local application when a matching URL is opened, even if the program is not intended as a URL handler. Ro...

CVE-2021-29981

CVE-2021-29981 affects Firefox < 91 and Thunderbird

CVE-2023-4577

CVE-2023-4577 is a memory-corruption issue in the Firefox/Thunderbird code path where UpdateRegExpStatics could access initialStringHeap after it had been garbage collected, potentially causing an exploitable crash. Connected advisories corroborate that affected products include Firefox versions ...

CVE-2019-9815

CVE-2019-9815 describes a timing-attack similar to Spectre when hyperthreading is not disabled. Affected: macOS content threads (macOS 10.14.5 introduces a sysctl option to disable hyperthreading for untrusted code on the main or worker JavaScript threads), and affected Firefox/Thunderbird versio...

CVE-2019-9818

CVE-2019-9818 is a use-after-free in the crash generation server used by Mozilla Firefox/Thunderbird on Windows. The issue, described as a race condition in the crash reporter server, can lead to a potentially exploitable crash and sandbox escape. Public references indicate the vulnerability affe...

CVE-2023-4575

CVE-2023-4575 describes a memory safety risk in Mozilla components where IPC FilePickerShownCallback could suffer a use-after-free due to multiple identical callbacks being created and destroyed concurrently during File Picker window invocation. Affected products include Firefox (all listed varia...

CVE-2021-23991

CVE-2021-23991 affects Thunderbird before 78.9.1. If a user has previously imported Alice’s OpenPGP key and Alice extends its validity but the updated key hasn’t been imported, an attacker can send a crafted version of Alice’s key containing an invalid subkey. Thunderbird may then attempt to use ...

CVE-2023-5174

The CVE-2023-5174 entry describes a Windows-specific issue in the Firefox sandbox handling: if a process fails to duplicate a handle during process creation, the sandbox code may double-free a pointer, causing a use-after-free and potentially an exploitable crash. Affected products are Firefox be...

CVE-2021-29948

Thunderbird prior to 78.10.0 is affected by CVE-2021-29948, where signatures are written to disk before verification and may be at risk of a race condition if a local attacker replaces the file. Impact includes potential signature forgery; remediation is to upgrade Thunderbird to 78.10.0 or newer...

CVE-2019-11694

CVE-2019-11694 is a Windows-only vulnerability in the Mozilla Firefox/Thunderbird stack where an uninitialized memory value can leak from a broker into a renderer when accessing an otherwise unavailable file in the Windows sandbox. Affected products include Thunderbird < 60.7, Firefox < 67,...

CVE-2021-23992

Thunderbird is affected by CVE-2021-23992, where an attacker can craft an OpenPGP key by replacing an original user ID or adding another, causing the user to be confused about key ownership. The issue stems from Thunderbird not checking that the OpenPGP key’s user ID has a valid self-signature be...

CVE-2023-5730

The CVE-2023-5730 entry concerns memory safety bugs in Mozilla Firefox (Firefox 118 and ESR 115.3) and Thunderbird 115.3 that could allow arbitrary code execution. Affected versions are Firefox < 119, Firefox ESR < 115.4, and Thunderbird

CVE-2017-5390

CVE-2017-5390 concerns the JSON viewer in Mozilla/Thunderbird Developer Tools that uses insecure methods to copy/view JSON or HTTP header data, enabling potential privilege escalation. Concrete details in connected docs show this affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5460

CVE-2017-5460 is a use-after-free in Firefox/Thunderbird frame selection. Public docs confirm it affects Firefox/Firefox ESR (before 53) and Thunderbird (older branches) with a potentially exploitable crash and, in some advisories, possible arbitrary code execution. Root cause: use-after-free dur...

CVE-2023-5724

The connected Astra Linux bulletin confirms CVE-2023-5724: Drivers are not always robust to extremely large draw calls, potentially causing crashes in Firefox before 119, Firefox ESR before 115.4, and Thunderbird before 115.4.1. Affected versions are Firefox <119, Firefox ESR <115.4, Thunde...

CVE-2023-29539

Concrete details found: CVE-2023-29539 (Content-Disposition filename truncation on NULL) affects Firefox family and Thunderbird; root cause is NULL character in filename causing truncation and potential Reflected File Download. Connected documents (Astra Linux bulletin, Debian/CentOS advisories) ...

CVE-2019-9794

CVE-2019-9794: Command line arguments are not discarded when Firefox is invoked as a shell handler for URLs on Windows, enabling potential remote file retrieval/execution. Affected: Thunderbird <60.6, Firefox ESR <60.6, Firefox

CVE-2021-29951

CVE-2021-29951 involves the Mozilla Maintenance Service granting SERVICE_START access to BUILTIN|Users, enabling domain users to start/stop the browser update service. Affected: Windows systems older than Windows 10 build 1709; Firefox prior to 87 and Firefox ESR prior to 78.10.1, Thunderbird pri...

CVE-2018-12376

CVE-2018-12376 involves memory safety bugs in Firefox 61/ESR 60.1 and Thunderbird

CVE-2018-12390

CVE-2018-12390 corresponds to memory-safety bugs in Mozilla Firefox and Thunderbird prior to patched versions. Affected: Firefox < 63, Firefox ESR < 60.3, Thunderbird

CVE-2023-4582

CVE-2023-4582 is a Firefox-on-macOS-specific issue where large allocation checks in Angle for GLSL shaders could overflow a private shader memory allocation, leading to a buffer overflow. The vulnerability affects Firefox versions earlier than 117 (and Firefox ESR < 115.2, Thunderbird

CVE-2023-5725

CVE-2023-5725 is a documented vulnerability affecting Firefox (before 119), Firefox ESR (before 115.4), and Thunderbird (before 115.4.1). A malicious installed WebExtension could open arbitrary URLs, which under certain conditions could enable collection of sensitive user data. The connected docu...

CVE-2018-12365

CVE-2018-12365 is a vulnerability where a compromised IPC child process can escape the content sandbox and list names of arbitrary files on the file system without user consent. It affects Thunderbird (versions below 60, including 52.9) and Firefox-based products (Firefox ESR < 60.1/52.9, Fire...

CVE-2021-29987

CVE-2021-29987 describes a UI permission trick where after requesting multiple permissions and closing the first panel, subsequent panels appear in a different position but still register a click in the default location, potentially causing a user to grant unwanted permissions. Technical details ...

CVE-2022-29913

The CVE-2022-29913 vulnerability affects Thunderbird prior to version 91.9, caused by the parent process not properly checking if Speech Synthesis is enabled when handling commands from a child process. The issue is confirmed in multiple sources (e.g., CentOS/RH advisories and Astra Linux) and is...

CVE-2022-3266

CVE-2022-3266 is an out-of-bounds read in H.264 video decoding that can trigger a crash. Affected products in the provided documents include Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox

CVE-2025-4918

CVE-2025-4918 describes an out-of-bounds read/write on a JavaScript Promise object affecting Firefox and Thunderbird. Affected: Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1; Thunderbird < 128.10.2, Thunderbird

CVE-2017-5375

CVE-2017-5375 affects Mozilla Thunderbird, Firefox ESR, and Firefox prior to certain version thresholds. The issue is a JIT code allocation vulnerability that can bypass ASLR and DEP, enabling memory corruption. Public exploit activity exists (ASM.JS JIT-Spray PoCs) for multiple Firefox versions ...

CVE-2018-12362

CVE-2018-12362 is an integer overflow in the SSSE3 scaler used during graphics operations, affecting Thunderbird and Firefox variants prior to specific versions (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox