Read the docs
Red Hat Security Advisory

RHSA-2021:0299

thunderbird security update

Released 2021-01-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2020-12359 CVE-2020-15685 · GHSA-c839-4fpv-9xp7

Command injection in Mozilla Thunderbird

Priority HIGH 73

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00881 Published 2022-12-22 Partial fix · 78.7 CWE-77
TI-2021-06287 CVE-2021-23964 · GHSA-4j74-99vm-hh36

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01361 Published 2021-02-26 Partial fix · 85, 78.7 CWE-787
TI-2021-06277 CVE-2021-23954 · GHSA-5hq3-8hcw-572m

Type confusion in Mozilla Firefox

Priority MEDIUM 40

Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01186 Published 2021-02-26 Partial fix · 85, 78.7 CWE-843
TI-2020-16399 CVE-2020-26976 · GHSA-77q8-crvw-8w9q

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered…

Priority LOW 32

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure co…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01639 Published 2021-01-07 Partial fix · 84