| CVE-2021-29985 |
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29986 |
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29987 |
After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be…
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29988 |
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory…
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29989 |
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29969 |
If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses…
|
Not rated
|
Aug 5, 2021 |
| CVE-2021-29970 |
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash
|
Not rated
|
Aug 5, 2021 |
| CVE-2021-29976 |
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird
|
Not rated
|
Aug 5, 2021 |
| CVE-2021-23991 |
If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23992 |
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23993 |
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23994 |
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23995 |
When Responsive Design Mode was enabled, it used references to objects that were previously freed
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23998 |
Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23999 |
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-24002 |
When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29945 |
The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29946 |
Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29948 |
Signatures are written to disk before and read during verification, which might be subject to a race condition when a…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29949 |
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29950 |
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29951 |
The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29956 |
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29957 |
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29964 |
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to…
|
Not rated
|
Jun 24, 2021 |