Filter
AND
-Infinity
0

ThunderbirdBy crafting a malformed file name for an attachment in a multipart message, an attacker can trick Th…

First published (updated )

ThunderbirdThunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can b…

First published (updated )

FirefoxMozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYS…

First published (updated )

FirefoxA process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, whi…

First published (updated )

Firefox ESRMemory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of m…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian LinuxBuffer Overflow

8.8
EPSS
0.10%
First published (updated )

redhat/nssBuffer Overflow

8.8
First published (updated )

Thunderbird3 vulnerabilities

First published (updated )

Path Traversal

8.8
First published (updated )

Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when ch…

First published (updated )

A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, whi…

First published (updated )

Thunderbird5 vulnerabilities

First published (updated )

Path Traversal

8.8
First published (updated )

An attacker with control over a content process could potentially leverage the privileged UITour act…

7.1
EPSS
0.03%
First published (updated )

Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when ch…

First published (updated )

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of…

First published (updated )

A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, whi…

First published (updated )

IBM InfoSphere Guardium z/OSWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to t…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Open-Xchange Open-Xchange App Suite FrontendLast updated 24 July 2024

8.8
EPSS
0.04%
First published (updated )

ThunderbirdA crafted URL containing specific Unicode characters could have hidden the true origin of the page, …

7.3
EPSS
0.04%
First published (updated )

ThunderbirdUse After Free

8.1
EPSS
0.05%
First published (updated )

FirefoxMemory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8…

First published (updated )

FirefoxUse After Free

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Red Hat FedoraRegular expression denial of service in Rust's regex crate

7.5
First published (updated )

Matrix Javascript SDKMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions

7.5
First published (updated )

Matrix Javascript SDKMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion

8.6
First published (updated )

Matrix Javascript SDKMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

8.6
First published (updated )

ThunderbirdCommand Injection

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ThunderbirdWhen resizing a popup while requesting fullscreen access, the popup would have become unable to leav…

7.5
First published (updated )

ThunderbirdUse After Free

8.8
First published (updated )

FirefoxAn attacker could have sent a message to the parent process where the contents were used to double-i…

8.8
First published (updated )

FirefoxIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollut…

8.8
First published (updated )

redhat/thunderbirdIt may be possible for an attacker to craft an email message that causes Thunderbird to perform an o…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203