Read the docs
Red Hat Security Advisory

RHSA-2023:3221

thunderbird security update

Released 2023-05-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2023-15506 CVE-2023-32207 · GHSA-m6hx-2pxx-hfg7

Authentication bypass by spoofing in Mozilla Firefox

Priority MEDIUM 41

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00731 Published 2023-06-02 Partial fix · 113, 102.11 CWE-290
TI-2023-15514 CVE-2023-32215 · GHSA-2f35-mvmp-f953

Out-of-bounds write in Mozilla Firefox

Priority LOW 39

Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00753 Published 2023-06-02 Partial fix · 113, 102.11 CWE-787
TI-2023-15512 CVE-2023-32213 · GHSA-3v6f-r45v-h8fj

Use of uninitialized resource in Mozilla Firefox

Priority LOW 39

When reading a file, an uninitialized value could have been used as read limit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00753 Published 2023-06-02 Partial fix · 113, 102.11 CWE-908
TI-2023-15505 CVE-2023-32206 · GHSA-pxpc-fwwv-9487

Out-of-bounds read in Mozilla Firefox

Priority LOW 30

An out-of-bound read could have led to a crash in the RLBox Expat driver.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00703 Published 2023-06-02 Partial fix · 113, 102.11 CWE-125