Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9.Check if you run itEPSS 0.48%Apr 29, 2025
- Medium6.5Memory safety bugs present in Firefox 137 and Thunderbird 137.Check if you run itEPSS 0.30%Apr 29, 2025
- High8.1Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9.Check if you run itEPSS 0.50%Apr 29, 2025
- Medium5.3A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.Check if you run itEPSS 0.33%Apr 29, 2025
- Medium5.1Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code executioCheck if you run itEPSS 0.19%Apr 29, 2025
- Medium6.5A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage AccesCheck if you run itEPSS 0.18%Apr 29, 2025
- Medium4.8A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access.Check if you run itEPSS 0.32%Apr 29, 2025
- Medium6.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.Check if you run itEPSS 0.29%Apr 29, 2025
- High7.1An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execCheck if you run itEPSS 0.44%Apr 29, 2025
- Critical9.1A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process insteaCheck if you run itEPSS 0.45%Apr 29, 2025
- Medium5.9Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.Check if you run itEPSS 0.45%Apr 29, 2025
- High8.8Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior.Check if you run itEPSS 0.66%Apr 29, 2025
- Medium6.4When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium6.3By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwardCheck if you run itEPSS 0.36%Apr 15, 2025
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 23.18%Oct 9, 2024
- UnknownMozilla Firefox Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 29.73%Nov 8, 2022
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.56%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.92%Aug 15, 2022
- UnknownThunderbird for Windows ms-msdt, search, and search-ms Protocols VulnerabilityPatch nowKEVEPSS 0.78%Jun 15, 2022
- Critical9.6Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 2.35%Mar 5, 2022
- High8.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 14.26%Mar 5, 2022