TI-2021-10587 CVE-2021-29970 · GHSA-822v-pgr4-6w5g
Use after free in Mozilla Thunderbird
Priority MEDIUM 41
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash.
Vulnerabilities
8 records
TI-2021-10588 CVE-2021-29971 · GHSA-hmhq-whfw-x78q
If a user had granted a permission to a webpage and saved that grant, any webpage running…
Priority MEDIUM 44
If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission.
TI-2021-10589 CVE-2021-29972 · GHSA-cx7x-p2rh-c2m2
Use after free in Mozilla Firefox
Priority MEDIUM 40
A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library.
TI-2021-10590 CVE-2021-29973 · GHSA-5gg7-f3mp-cf84
Password autofill was enabled without user interaction on insecure websites on Firefox…
Priority MEDIUM 40
Password autofill was enabled without user interaction on insecure websites on Firefox for Android.
TI-2021-10591 CVE-2021-29974 · GHSA-wvgv-pqxg-x8rr
When network partitioning was enabled, e.g.
Priority LOW 22
When network partitioning was enabled, e.g.
TI-2021-10592 CVE-2021-29975 · GHSA-j6fq-x87m-xrqh
Through a series of DOM manipulations, a message, over which the attacker had control of…
Priority LOW 31
Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correctly shown in the address…
TI-2021-10593 CVE-2021-29976 · GHSA-jv3x-w8ff-cj2g
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird.
TI-2021-10594 CVE-2021-29977 · GHSA-9fqh-jpcp-95fv
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 40
Mozilla developers reported memory safety bugs present in Firefox 89.