Mozilla Thunderbird

• CVE-2024-0741 Medium 6.5 An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderb 2.2%
• CVE-2023-6864 Unrated Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 1.2%
• CVE-2023-6863 Unrated The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thund 1.0%
• CVE-2023-6862 Unrated A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 115.6 and Thunderbird < 115.6. 1.0%
• CVE-2023-6861 Unrated The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. 1.4%
• CVE-2023-6860 Unrated The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 11 1.0%
• CVE-2023-6859 Unrated A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. 1.1%
• CVE-2023-6858 High 8.8 Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. 1.5%
• CVE-2023-6857 Unrated When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Unix-based operating systems (Android, Linux 0.7%
• CVE-2023-6856 Unrated The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution an 20.6%
• CVE-2023-50761 Unrated The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compare the signature creation date with the messa 0.6%
• CVE-2023-50762 Unrated When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the 0.6%
• CVE-2023-6212 Unrated Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.9%
• CVE-2023-6209 Unrated Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems 1.4%
• CVE-2023-6208 Unrated When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11 0.9%
• CVE-2023-6207 Unrated Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. 0.9%
• CVE-2023-6206 Unrated The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click 0.6%
• CVE-2023-6205 Unrated It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox ESR < 115 0.9%
• CVE-2023-6204 Unrated On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability aff 0.8%
• CVE-2023-5732 Unrated Address bar spoofing via bidirectional characters 1.0%
• CVE-2023-5730 Unrated Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 1.5%
• CVE-2023-5728 High 7.5 During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR 1.3%
• CVE-2023-5727 Unrated The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. *Note: This issue only affected Windows 0.8%
• CVE-2023-5726 Unrated A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. *Note: This issue only affected macOS op 0.7%
• CVE-2023-5725 Unrated A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ES 0.9%
• CVE-2023-5724 High 7.5 Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 1.5%
• CVE-2023-5721 Unrated It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox < 119, Fire 0.8%
• CVE-2023-5176 Critical 9.8 Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 1.4%
• CVE-2023-5174 Critical 9.8 If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. *This 1.2%
• CVE-2023-5171 Unrated During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerabili 1.1%
• CVE-2023-5169 Unrated A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vuln 1.1%
• CVE-2023-5168 Critical 9.8 A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. *This bug 1.1%
• CVE-2023-4585 High 8.8 Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 0.8%
• CVE-2023-4584 Unrated Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 0.8%
• CVE-2023-4583 High 7.5 Browsing Context potentially not cleared when closing Private Window 0.7%
• CVE-2023-4582 High 8.8 Buffer Overflow in WebGL glGetProgramiv 0.9%
• CVE-2023-4581 Unrated XLL file extensions were downloadable without warnings 0.6%
• CVE-2023-4580 Unrated Push notifications saved to disk unencrypted 0.4%
• CVE-2023-4578 Unrated Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception 0.6%
• CVE-2023-4577 Unrated Memory corruption in JIT UpdateRegExpStatics 0.7%
• CVE-2023-4576 Unrated Integer Overflow in RecordedSourceSurfaceCreation 0.8%
• CVE-2023-4575 Unrated Memory corruption in IPC FilePickerShownCallback 0.7%
• CVE-2023-4574 Unrated Memory corruption in IPC ColorPickerShownCallback 0.7%
• CVE-2023-4573 Unrated Memory corruption in IPC CanvasTranslator 0.6%
• CVE-2023-4057 Unrated Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.9%
• CVE-2023-4054 Unrated When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulne 0.2%
• CVE-2023-4053 Unrated Full screen notification obscured by external program 0.8%
• CVE-2023-4052 Unrated The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling u 0.7%
• CVE-2023-4051 Unrated Full screen notification obscured by file open dialog 0.7%
• CVE-2023-3417 Unrated File Extension Spoofing using the Text Direction Override Character 0.7%