Skip to content

Vulnerabilities of Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2016-9905 A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents Not rated Jun 11, 2018
CVE-2016-9895 Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline… Not rated Jun 11, 2018
CVE-2016-9904 An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another… Not rated Jun 11, 2018
CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5 Not rated Jun 11, 2018
CVE-2016-9074 An existing mitigation of timing side-channel attacks is insufficient in some circumstances Not rated Jun 11, 2018
CVE-2016-9079 Exploited Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability 7.5 High Jun 11, 2018
CVE-2016-9066 A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large… Not rated Jun 11, 2018
CVE-2016-5290 Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4 Not rated Jun 11, 2018
CVE-2016-5297 An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking… Not rated Jun 11, 2018
CVE-2016-5296 A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a… Not rated Jun 11, 2018
CVE-2016-5294 The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the… Not rated Jun 11, 2018
CVE-2016-5291 A same-origin policy bypass with local shortcut files to load arbitrary local content from disk Not rated Jun 11, 2018
CVE-2017-5461 Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and… Not rated May 11, 2017

Other Mozilla products