Mozilla Thunderbird any version

Spoofing issue in the Popup Blocker component

Sender Spoofing via Malformed From Header in Thunderbird

Spoofing issue in the Downloads Panel component

Denial-of-service due to out-of-memory in the Graphics: WebRender component

Memory safety bug fixed in Firefox 152

Denial-of-service in the PDF Viewer component

Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

Memory safety bugs fixed in Thunderbird 150.0.1

Denial-of-service in the Graphics: WebGPU component

Information disclosure in the Graphics: ImageLib component

Information disclosure in the Storage: IndexedDB component

Information disclosure in the Framework component in DevTools

Memory safety bug fixed in Thunderbird ESR 140.12

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Other issue in the DOM: Copy & Paste and Drag & Drop component

Memory safety bug fixed in Firefox 152

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Firefox 152

Invalid pointer in the Security: PSM component

Off-by-one out of bounds read in MIME header parser for forwarding

Information disclosure due to malicious IMAP server response

One byte overflow read in mail parser

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152

Information disclosure in the DOM: Security component

Site isolation issue in the Graphics: CanvasWebGL component

Site isolation issue in the DOM: Navigation component

Site isolation issue in the Graphics component

Memory corruption in thread creation

Leaking file descriptors from the fork server

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents

Fullscreen notification is not displayed when fullscreen is re-requested

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component

URL Bar Spoofing via non-BMP Unicode characters

JIT miscompilation in the JavaScript Engine: JIT component

Memory safety bugs fixed in Firefox 139 and Thunderbird 139