Skip to content

Vulnerabilities of Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2018-12372 Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML… Not rated Oct 18, 2018
CVE-2018-12362 An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3)… Not rated Oct 18, 2018
CVE-2018-12361 An integer overflow can occur in the SwizzleData code while calculating buffer sizes Not rated Oct 18, 2018
CVE-2018-12379 When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be… Not rated Oct 18, 2018
CVE-2018-12378 A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that… Not rated Oct 18, 2018
CVE-2018-12360 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by… Not rated Oct 18, 2018
CVE-2018-12368 Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they… Not rated Oct 18, 2018
CVE-2018-12377 A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during… Not rated Oct 18, 2018
CVE-2018-12359 A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element… Not rated Oct 18, 2018
CVE-2018-12367 In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the… Not rated Oct 18, 2018
CVE-2018-12376 Memory safety bugs present in Firefox 61 and Firefox ESR 60.1 Not rated Oct 18, 2018
CVE-2018-12366 An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a… Not rated Oct 18, 2018
CVE-2018-5162 Plaintext of decrypted emails can leak through the src attribute of remote images, or links Not rated Jun 11, 2018
CVE-2018-5161 Crafted message headers can cause a Thunderbird process to hang on receiving the message Not rated Jun 11, 2018
CVE-2018-5174 In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated… Not rated Jun 11, 2018
CVE-2018-5184 Using remote content in encrypted messages can lead to the disclosure of plaintext Not rated Jun 11, 2018
CVE-2018-5159 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,… Not rated Jun 11, 2018
CVE-2018-5183 Mozilla developers backported selected changes in the Skia library Not rated Jun 11, 2018
CVE-2018-5170 It is possible to spoof the filename of an attachment and display an arbitrary attachment name Not rated Jun 11, 2018
CVE-2018-5150 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 Not rated Jun 11, 2018
CVE-2018-5168 Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property… Not rated Jun 11, 2018
CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of… Not rated Jun 11, 2018
CVE-2018-5185 Plaintext of decrypted emails can leak through by user submitting an embedded form Not rated Jun 11, 2018
CVE-2018-5129 A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages Not rated Jun 11, 2018
CVE-2018-5155 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths Not rated Jun 11, 2018

Other Mozilla products