Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled.EPSS 0.3%May 27, 2025
- High8.1Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10.EPSS 0.5%May 27, 2025
- High8.1Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.EPSS 0.5%May 27, 2025
- Medium5.4A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page.EPSS 0.3%May 27, 2025
- Medium4.3Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks.EPSS 0.3%May 27, 2025
- Medium4.8Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code exeEPSS 0.2%May 27, 2025
- Medium4.8Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execuEPSS 0.3%May 27, 2025
- Medium4.3Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks.EPSS 0.2%May 27, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internEPSS 0.2%May 21, 2025
- High8.8An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes.EPSS 8.7%May 17, 2025
- Critical9.8An attacker was able to perform an out-of-bounds read or write on a JavaScript object.EPSS 9.4%May 17, 2025
- High8.1Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9.EPSS 0.5%Apr 29, 2025
- Medium6.5Memory safety bugs present in Firefox 137 and Thunderbird 137.EPSS 0.3%Apr 29, 2025
- High8.1Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9.EPSS 0.5%Apr 29, 2025
- Medium5.3A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.EPSS 0.3%Apr 29, 2025
- Medium5.1Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code executioEPSS 0.2%Apr 29, 2025
- Medium6.5A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage AccesEPSS 0.2%Apr 29, 2025
- Medium4.8A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access.EPSS 0.3%Apr 29, 2025
- Medium6.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.EPSS 0.3%Apr 29, 2025
- High7.1An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges.EPSS 0.3%Apr 29, 2025
- Medium5.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execEPSS 0.4%Apr 29, 2025
- Critical9.1A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process insteaEPSS 0.5%Apr 29, 2025
- Medium5.9Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.EPSS 0.5%Apr 29, 2025
- High8.8Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior.EPSS 0.7%Apr 29, 2025
- Medium6.5A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition.EPSS 0.3%Apr 15, 2025