Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2020-05528 CVE-2020-6819 · GHSA-cv8q-mpvf-42h2

Use after free in Mozilla Thunderbird

Priority CRITICAL 94KEV

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03039 Published 2020-04-24 Partial fix · 68.7.0, 74.0.1 +1 CWE-416
TI-2020-05529 CVE-2020-6820 · GHSA-f77r-rqc9-53hh

Race condition in Mozilla Thunderbird

Priority CRITICAL 94KEV

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.07063 Published 2020-04-24 Partial fix · 68.7.0, 74.0.1 +1 CWE-362
Priority LOW 36

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01505 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-908
TI-2020-05531 CVE-2020-6822 · GHSA-v2mh-4gcf-6ghr

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 41

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01325 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787
TI-2020-05534 CVE-2020-6825 · GHSA-pj8r-w3xr-j4w5

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 46

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02188 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787