| CVE-2025-2817 |
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by…
|
8.8
High
|
Apr 29, 2025 |
| CVE-2025-3523 |
When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only…
|
6.4
Medium
|
Apr 15, 2025 |
| CVE-2025-3522 |
Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally
|
6.3
Medium
|
Apr 15, 2025 |
| CVE-2025-2830 |
By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into…
|
6.3
Medium
|
Apr 15, 2025 |
| CVE-2025-3034 |
Memory safety bugs present in Firefox 136 and Thunderbird 136
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-3033 |
After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded
|
7.7
High
|
Apr 1, 2025 |
| CVE-2025-3032 |
Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks
|
7.4
High
|
Apr 1, 2025 |
| CVE-2025-3031 |
An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-3030 |
Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-3029 |
A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a…
|
7.3
High
|
Apr 1, 2025 |
| CVE-2025-3028 |
JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-26696 |
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an…
|
7.0
High
|
Mar 10, 2025 |
| CVE-2025-26695 |
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have…
|
5.3
Medium
|
Mar 10, 2025 |
| CVE-2025-1938 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
|
6.5
Medium
|
Mar 4, 2025 |
| CVE-2025-1943 |
Memory safety bugs present in Firefox 135 and Thunderbird 135
|
8.2
High
|
Mar 4, 2025 |
| CVE-2025-1937 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7
|
7.5
High
|
Mar 4, 2025 |
| CVE-2025-1936 |
jar: URLs retrieve local file content packaged in a ZIP archive
|
7.3
High
|
Mar 4, 2025 |
| CVE-2025-1942 |
When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into…
|
9.8
Critical
|
Mar 4, 2025 |
| CVE-2025-1935 |
A web page could trick a user into setting that site as the default handler for a custom URL protocol
|
4.3
Medium
|
Mar 4, 2025 |
| CVE-2025-1934 |
It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering…
|
6.5
Medium
|
Mar 4, 2025 |
| CVE-2025-1932 |
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access
|
8.1
High
|
Mar 4, 2025 |
| CVE-2025-1931 |
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a…
|
7.5
High
|
Mar 4, 2025 |
| CVE-2025-1933 |
On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory
|
7.6
High
|
Mar 4, 2025 |
| CVE-2025-1930 |
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the…
|
8.8
High
|
Mar 4, 2025 |
| CVE-2025-1015 |
The Thunderbird Address Book URI fields contained unsanitized links
|
5.4
Medium
|
Feb 4, 2025 |