Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Mozilla Firefox, Firefox ESR — USN-3778-1 Clear all filters
TI-2018-08887 CVE-2018-12387 · GHSA-vfrp-p8qm-9m8x

Improper input validation in Mozilla Firefox ESR

Priority MEDIUM 51

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0959 Published 2018-10-18 Fixed in 60.2.2, 62.0.3 CWE-20
TI-2018-08886 CVE-2018-12386 · GHSA-5vgc-hmw3-287j

Incorrect type conversion in Mozilla Firefox ESR

Priority MEDIUM 50

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.13524 Published 2018-10-18 Fixed in 60.2.2, 62.0.3 CWE-704
TI-2018-08885 CVE-2018-12385 · GHSA-w434-f353-fv6q

Improper input validation in Mozilla Thunderbird

Priority LOW 31

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00358 Published 2018-10-18 Fixed in 60.2.1, 62.0.2 CWE-20