Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Mozilla Firefox — USN-3874-1 Clear all filters
TI-2018-13089 CVE-2018-18505 · GHSA-5g4g-56fq-mvwf

Improper authentication in Mozilla Thunderbird

Priority MEDIUM 50

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.04416 Published 2019-02-05 Fixed in 60.5, 65 CWE-287
TI-2018-13087 CVE-2018-18503 · GHSA-cgpr-293c-5r54

Memory corruption in Mozilla Firefox

Priority MEDIUM 41

When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01375 Published 2019-02-05 Fixed in 65 CWE-119
TI-2018-13086 CVE-2018-18502 · GHSA-pv8w-m2qh-gvj6

Memory corruption in Mozilla Firefox

Priority MEDIUM 46

Mozilla developers and community members reported memory safety bugs present in Firefox 64.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02153 Published 2019-02-05 Fixed in 65 CWE-119
TI-2018-13085 CVE-2018-18501 · GHSA-4hxm-f92j-36cq

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 48

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03372 Published 2019-02-05 Fixed in 60.5, 65 CWE-119