Mozilla Thunderbird

• CVE-2025-1942 Critical 9.8 Disclosure of uninitialized memory when .toUpperCase() causes string to get longer 0.5%
• CVE-2025-1934 Medium 6.5 Unexpected GC during RegExp bailout processing 0.5%
• CVE-2025-1933 High 7.6 JIT corruption of WASM i32 return values on 64-bit CPUs 0.3%
• CVE-2025-1932 High 8.1 Inconsistent comparator in XSLT sorting led to out-of-bounds access 0.4%
• CVE-2025-1931 High 7.5 Use-after-free in WebTransportChild 0.5%
• CVE-2025-1930 High 8.8 AudioIPC StreamData could trigger a use-after-free in the Browser process 0.4%
• CVE-2025-1015 Medium 5.4 Unsanitized address book fields 1.4%
• CVE-2025-1020 Critical 9.8 Memory safety bugs fixed in Firefox 135 and Thunderbird 135 0.5%
• CVE-2025-1017 Critical 9.8 Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 0.6%
• CVE-2025-1016 Critical 9.8 Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 0.6%
• CVE-2025-0510 Medium 6.5 Address of e-mail sender can be spoofed by malicious email 0.3%
• CVE-2025-1014 High 8.8 Certificate length was not properly checked 0.4%
• CVE-2025-1013 Medium 6.5 Potential opening of private browsing tabs in normal browsing windows 0.3%
• CVE-2025-1019 Medium 4.3 Fullscreen notification not properly displayed 0.4%
• CVE-2025-1012 Critical 9.8 Use-after-free during concurrent delazification 0.5%
• CVE-2025-1011 Critical 9.8 A bug in WebAssembly code generation could result in a crash 0.6%
• CVE-2025-1018 High 7.3 Fullscreen notification is not displayed when fullscreen is re-requested 0.4%
• CVE-2025-1010 Critical 9.8 Use-after-free in Custom Highlight 0.5%
• CVE-2025-1009 Critical 9.8 Use-after-free in XSLT 1.2%
• CVE-2025-0247 Critical 9.8 Memory safety bugs fixed in Firefox 134 and Thunderbird 134 10.6%
• CVE-2025-0243 Medium 5.1 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 0.2%
• CVE-2025-0242 Medium 6.5 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 14.7%
• CVE-2025-0241 High 7.7 Memory corruption when using JavaScript Text Segmentation 0.7%
• CVE-2025-0240 Medium 4.0 Compartment mismatch when parsing JavaScript JSON module 0.7%
• CVE-2025-0239 Medium 4.0 Alt-Svc ALPN validation failure when redirected 0.2%
• CVE-2025-0238 Medium 5.3 Use-after-free when breaking lines in text 0.8%
• CVE-2025-0237 Medium 5.4 WebChannel APIs susceptible to confused deputy attack 0.6%
• CVE-2024-11699 High 8.8 Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.7%
• CVE-2024-11708 Medium 6.5 Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133. 0.4%
• CVE-2024-11706 Medium 6.5 A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This 0.5%
• CVE-2024-11705 Critical 9.1 `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with 0.7%
• CVE-2024-11698 Critical 9.8 A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users u 0.7%
• CVE-2024-11704 Critical 9.8 A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially l 0.9%
• CVE-2024-11697 High 8.8 When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vuln 0.8%
• CVE-2024-11696 Medium 5.4 The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, 0.4%
• CVE-2024-11695 Medium 5.4 A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Fire 0.5%
• CVE-2024-11694 Medium 6.1 Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue co 0.5%
• CVE-2024-11693 Critical 9.8 The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerabili 0.8%
• CVE-2024-11702 High 7.5 Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects F 0.5%
• CVE-2024-11701 Medium 4.3 The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affect 0.4%
• CVE-2024-11692 Medium 4.3 An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133, Firefox ESR < 128 0.5%
• CVE-2024-11700 High 8.1 Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposi 0.5%
• CVE-2024-11691 High 8.8 Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. *This bug only affected the applicatio 0.7%
• CVE-2024-11159 Medium 5.3 Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1. 0.3%
• CVE-2024-10468 Critical 9.8 Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132 and Thunderbird < 132. 0.4%
• CVE-2024-10467 Critical 9.8 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.6%
• CVE-2024-10466 High 7.5 By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox < 132, Firefox ESR < 128 0.8%
• CVE-2024-10465 High 7.5 A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. 0.6%
• CVE-2024-10464 High 7.5 Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerabil 0.6%
• CVE-2024-10463 High 7.5 Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132. 0.7%