Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
362 matching records.
-
Privilege escalation in Firefox for iOS.
Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
Privilege escalation in the Reader View component in Firefox for iOS.
Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
Thunderbird allowed feed subscriptions to file: URLs that point to a network share.
Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed. Windows then sent…
-
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64.
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap…
-
For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the…
For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the configured server URL used unencrypted HTTP. An attacker able to observe network…
-
If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server…
If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these…
-
When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the proxy with the calendar…
When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the proxy with the calendar server's username and password. This affected both setting up a new calendar and…
-
When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment (a…
When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment (a .desktop file on Linux, or a .url or .lnk file on Windows) was replaced with the…
-
When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it.
When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or compromised homeserver could provide a file: URL, causing Thunderbird to…
-
When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar…
When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious…
-
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC…
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to…
-
Same-origin policy bypass in the CSS Parsing and Computation component.
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
-
Information disclosure in the Security: RLBox component.
Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Other issue in the Media component in Firefox for Android.
Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.
-
Clickjacking issue in the Autofill component in Firefox for Android.
Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.
-
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component.
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Other issue in Firefox for iOS.
Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the…
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed…
-
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message…
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.
-
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site…
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.
-
Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even…
Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even if it was not a configured news server. Line breaks in the message-ID were sent…
-
A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL.
A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location on every feed update. This allowed a malicious feed…
-
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same…
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning.…
-
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the…
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the attachment as an external attachment pointing to an…
-
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas.
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused…
-
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings…
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring…
-
Use-after-free in the Audio/Video component.
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
-
Privilege escalation in the Nimbus Desktop Client component.
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Other issue in the SVG component.
Other issue in the SVG component. This vulnerability was fixed in Firefox 160.
-
Incorrect boundary conditions, use-after-free in the Graphics component.
Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the Graphics component.
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.
-
Invalid pointer in the JavaScript Engine: JIT component.
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.
-
Invalid pointer in the Layout: Text and Fonts component.
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.
-
Information disclosure in the Marionette component.
Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.
-
Use-after-free in the Layout component.
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.
-
Invalid pointer in the DOM: Streams component.
Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Mitigation bypass in the File Handling component.
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
JIT miscompilation in the JavaScript Engine: JIT component.
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Mitigation bypass in the Add-ons Manager component.
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Spoofing issue in the Address Bar component.
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.
-
Undefined behavior in the WebRTC: Networking component.
Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Spoofing issue in the Security component.
Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Sandbox escape in the Console component.
Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the Graphics component.
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Same-origin policy bypass in the DOM: Core & HTML component.
Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Information disclosure in the Address Bar component.
Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Information disclosure in the Layout: Form Controls component.
Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Mitigation bypass in the SVG component.
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.
-
Site isolation issue in the Graphics: WebRender component.
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the WebRTC component.
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Information disclosure in the Layout component.
Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160.
-
Incorrect boundary conditions in the Graphics: WebRender component.
Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Sandbox escape in the Agent component.
Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160.
-
Use-after-free in the CSS Transitions and Animations component.
Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Sandbox escape in the Graphics: WebGPU component.
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
-
Uninitialized memory in the Graphics: WebGPU component.
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
-
Privilege escalation due to use-after-free in the WebRTC: Networking component.
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Sandbox escape due to use-after-free in the Widget: Gtk component.
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the Graphics: WebGPU component.
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Site isolation issue in the DOM: Navigation component.
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Site isolation issue in the Networking component.
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Spoofing issue in the DOM: Security component.
Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Mitigation bypass in the WebExtensions component.
Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Information disclosure in the Private Browsing component.
Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the CSS Parsing and Computation component.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
-
Use-after-free in the Graphics: WebRender component.
Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Sandbox escape in the DOM: Navigation component.
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the SVG component.
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160.
-
Sandbox escape due to use-after-free in the IPC component.
Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Same-origin policy bypass due to race condition in the Audio/Video component.
Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Other issue in the Networking: JAR component.
Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Sandbox escape due to use-after-free in the DOM: Service Workers component.
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160.
-
Use-after-free in the Layout: Text and Fonts component.
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the DOM: Editor component.
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the JavaScript: GC component.
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Invalid pointer in the Layout: Text and Fonts component.
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the Storage: localStorage & sessionStorage component.
Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the Networking: Cookies component.
Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the DOM: Workers component.
Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the JavaScript: GC component.
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the DOM: Selection component.
Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the DOM: Core & HTML component.
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the CSS Parsing and Computation component.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the Layout: Text and Fonts component.
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Incorrect boundary conditions in the Layout: Text and Fonts component.
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Invalid pointer in the Layout: Text and Fonts component.
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the Graphics: Text component.
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the JavaScript: GC component.
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the DOM: Core & HTML component.
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the CSS Parsing and Computation component.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the CSS Parsing and Computation component.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the DOM: Core & HTML component.
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Invalid pointer in the Networking: Cache component.
Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
Use-after-free in the Layout: Positioned component.
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160.
-
Use-after-free in the Layout: Positioned component.
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Use-after-free in the CSS Parsing and Computation component.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Incorrect boundary conditions in the DOM: CSS Object Model component.
Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Same-origin policy bypass in the Networking: HTTP component.
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
-
Invalid pointer in the DOM: Editor component.
Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Mozilla&limit=100. RSS for this section: feed.xml.