Mozilla Thunderbird

• CVE-2024-10462 High 7.5 Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. 0.6%
• CVE-2024-10461 Medium 6.1 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affec 0.6%
• CVE-2024-10460 Medium 5.4 The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and 0.3%
• CVE-2024-10459 Medium 6.5 An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 0.6%
• CVE-2024-10458 Medium 6.5 A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Th 0.6%
• CVE-2024-9403 High 7.3 Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. 0.4%
• CVE-2024-9402 Critical 9.8 Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.6%
• CVE-2024-9401 Critical 9.8 Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort 0.7%
• CVE-2024-9400 High 8.8 A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, F 0.5%
• CVE-2024-9399 High 7.5 A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox ES 0.5%
• CVE-2024-9398 Medium 5.3 By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulne 0.6%
• CVE-2024-9397 Medium 6.1 A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 12 0.4%
• CVE-2024-9396 High 8.8 It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, 0.6%
• CVE-2024-9394 Medium 6.1 An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to access cross-origin JSON content. This acc 0.5%
• CVE-2024-9393 High 7.5 An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This access 0.4%
• CVE-2024-9392 Critical 9.8 A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128 0.5%
• CVE-2024-8900 High 7.5 An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Th 0.4%
• CVE-2024-7652 High 7.5 Type Confusion in Async Generators in Javascript Engine 0.7%
• CVE-2024-8394 Medium 6.5 When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2. 0.3%
• CVE-2024-8387 Critical 9.8 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.6%
• CVE-2024-8386 Medium 6.1 If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox < 130, 0.4%
• CVE-2024-8385 Critical 9.8 A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, 0.6%
• CVE-2024-8384 Critical 9.8 The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnera 0.7%
• CVE-2024-8382 High 8.8 Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to 0.6%
• CVE-2024-8381 Critical 9.8 A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 1 4.4%
• CVE-2024-7529 High 8.1 The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115. 0.5%
• CVE-2024-7528 Critical 9.8 Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. 0.5%
• CVE-2024-7527 High 8.8 Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thund 0.6%
• CVE-2024-7526 High 7.5 ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR 0.6%
• CVE-2024-7525 Critical 9.1 It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Fir 0.6%
• CVE-2024-7522 Critical 9.1 Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, 0.6%
• CVE-2024-7521 Critical 9.8 Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 0.6%
• CVE-2024-7520 High 8.8 A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. 0.6%
• CVE-2024-7519 High 8.8 Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 0.6%
• CVE-2024-7518 Medium 6.5 Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and 0.5%
• CVE-2024-6615 High 8.8 Memory safety bugs fixed in Firefox 128 and Thunderbird 128 0.4%
• CVE-2024-6614 Medium 4.3 Incorrect listing of stack frames 0.4%
• CVE-2024-6613 Medium 5.5 Incorrect listing of stack frames 0.2%
• CVE-2024-6612 Medium 5.3 CSP violation leakage when using devtools 0.5%
• CVE-2024-6611 Critical 9.8 Incorrect handling of SameSite cookies 0.7%
• CVE-2024-6610 Medium 6.3 Form validation popups could block exiting full-screen mode 0.3%
• CVE-2024-6609 High 8.8 Memory corruption in NSS 0.6%
• CVE-2024-6608 Medium 4.3 Cursor could be moved out of the viewport using pointerlock. 0.4%
• CVE-2024-6607 High 8.8 Leaving pointerlock by pressing the escape key could be prevented 0.6%
• CVE-2024-6606 High 8.2 Out-of-bounds read in clipboard component 0.4%
• CVE-2024-6604 High 7.5 Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13 0.5%
• CVE-2024-6603 High 7.4 Memory corruption in thread creation 0.5%
• CVE-2024-6602 Critical 9.8 Memory corruption in NSS 1.0%
• CVE-2024-6601 Medium 4.7 Race condition in permission assignment 0.4%
• CVE-2024-6600 Medium 6.3 Memory corruption in WebGL API 0.4%