Lucene search

K
MozillaThunderbird

9 matches found

CVE
CVE
added 2024/09/03 1:15 p.m.232 views

CVE-2024-8381

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird

9.8CVSS8.8AI score0.20682EPSS
CVE
CVE
added 2024/09/03 1:15 p.m.218 views

CVE-2024-8385

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird

9.8CVSS8.7AI score0.00606EPSS
CVE
CVE
added 2024/09/03 1:15 p.m.215 views

CVE-2024-8387

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR...

9.8CVSS9.8AI score0.00787EPSS
CVE
CVE
added 2024/09/03 1:15 p.m.212 views

CVE-2024-8382

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had b...

8.8CVSS8.3AI score0.0035EPSS
CVE
CVE
added 2024/09/03 1:15 p.m.212 views

CVE-2024-8384

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < ...

9.8CVSS8.8AI score0.00862EPSS
CVE
CVE
added 2024/09/03 1:15 p.m.208 views

CVE-2024-8386

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird

6.1CVSS6.6AI score0.00192EPSS
CVE
CVE
added 2024/09/06 7:15 p.m.95 views

CVE-2024-7652

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird

7.5CVSS6.4AI score0.0085EPSS
CVE
CVE
added 2024/09/17 7:15 p.m.69 views

CVE-2024-8900

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird

7.5CVSS7.5AI score0.00249EPSS
CVE
CVE
added 2024/09/06 5:15 p.m.53 views

CVE-2024-8394

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird

6.5CVSS6.7AI score0.00174EPSS