Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Mozilla Firefox, Firefox ESR, Thunderbird — DSA-4295 Clear all filters
TI-2018-08868 CVE-2018-12367 · GHSA-q3w3-fw86-hj52

Improper input validation in Mozilla Thunderbird

Priority LOW 24

In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01985 Published 2018-10-18 Fixed in 60, 60.1 +1 CWE-20
TI-2018-08862 CVE-2018-12361 · GHSA-67p3-5m2h-325j

Integer overflow in Mozilla Thunderbird

Priority MEDIUM 43

An integer overflow can occur in the SwizzleData code while calculating buffer sizes.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02819 Published 2018-10-18 Fixed in 60, 60.1 +1 CWE-190
TI-2018-03750 CVE-2018-5187 · GHSA-3w2h-f87x-m6vp

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 47

Memory safety bugs present in Firefox 60 and Firefox ESR 60.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0298 Published 2018-10-18 Fixed in 60, 60.1 +1 CWE-119
TI-2018-03720 CVE-2018-5156 · GHSA-x98g-g264-xxpx

Improper input validation in Mozilla Thunderbird

Priority MEDIUM 49

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03755 Published 2018-10-18 Fixed in 60, 60.1 +2 CWE-20