Skip to content
fr Sign in
Not rated

CVE-2018-12360 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by…

Description

A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Affected products and versions

Product Affected versions Fixed in
Thunderbird 60 earliest → < 60 60
Thunderbird 52.9 earliest → < 52.9 52.9
Firefox ESR 60.1 earliest → < 60.1 60.1
Firefox ESR 52.9 earliest → < 52.9 52.9
Firefox 61 earliest → < 61 61

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Thunderbird

The 1713 CVEs of Thunderbird →
CVE-2026-118180 Matrix homeserver could redirect the chat session to a local file or network share 7.5 High CVE-2026-118179 Request forgery via news: links 8.8 High CVE-2026-118178 RSS feed could redirect its subscription to a local file or network share 5.7 Medium CVE-2026-118177 Calendar discovery accepted local file and remote network share locations 9.1 Critical
Track this CVE