| CVE-2025-4919 |
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes
|
8.8
High
|
May 17, 2025 |
| CVE-2025-4918 |
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object
|
9.8
Critical
|
May 17, 2025 |
| CVE-2025-4093 |
Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9
|
8.1
High
|
Apr 29, 2025 |
| CVE-2025-4092 |
Memory safety bugs present in Firefox 137 and Thunderbird 137
|
6.5
Medium
|
Apr 29, 2025 |
| CVE-2025-4091 |
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
|
8.1
High
|
Apr 29, 2025 |
| CVE-2025-4090 |
A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat
|
5.3
Medium
|
Apr 29, 2025 |
| CVE-2025-4089 |
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into…
|
5.1
Medium
|
Apr 29, 2025 |
| CVE-2025-4088 |
A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to…
|
6.5
Medium
|
Apr 29, 2025 |
| CVE-2025-4087 |
A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null…
|
4.8
Medium
|
Apr 29, 2025 |
| CVE-2025-4086 |
A specially crafted filename containing a large number of encoded newline characters could obscure the file's…
|
6.5
Medium
|
Apr 29, 2025 |
| CVE-2025-4085 |
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive…
|
7.1
High
|
Apr 29, 2025 |
| CVE-2025-4084 |
Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user…
|
5.7
Medium
|
Apr 29, 2025 |
| CVE-2025-4083 |
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow…
|
9.1
Critical
|
Apr 29, 2025 |
| CVE-2025-4082 |
Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other…
|
5.9
Medium
|
Apr 29, 2025 |
| CVE-2025-2817 |
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by…
|
8.8
High
|
Apr 29, 2025 |
| CVE-2025-3608 |
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially…
|
6.5
Medium
|
Apr 15, 2025 |
| CVE-2025-3035 |
By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous…
|
5.3
Medium
|
Apr 1, 2025 |
| CVE-2025-3034 |
Memory safety bugs present in Firefox 136 and Thunderbird 136
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-3033 |
After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded
|
7.7
High
|
Apr 1, 2025 |
| CVE-2025-3032 |
Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks
|
7.4
High
|
Apr 1, 2025 |
| CVE-2025-3031 |
An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-3030 |
Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-3029 |
A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a…
|
7.3
High
|
Apr 1, 2025 |
| CVE-2025-3028 |
JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-2857 |
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in…
|
10.0
Critical
|
Mar 27, 2025 |