Mozilla Thunderbird

Incorrect boundary conditions, integer overflow in the Audio/Video component

Incorrect boundary conditions in the Libraries component in NSS

Information disclosure in the DOM: Security component

Information disclosure in the IP Protection component

Information disclosure in the IP Protection component

Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2

Information disclosure in the Graphics: WebGPU component

Allowed UNC hostnames for attachments interpreted as a regular expression

Memory safety bugs fixed in Firefox 150 and Thunderbird 150

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

Spoofing issue in the Web Speech component

Spoofing issue in WebExtensions

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

Spoofing issue in the Popup Blocker component

Sender Spoofing via Malformed From Header in Thunderbird

Spoofing issue in the Downloads Panel component

Denial-of-service due to out-of-memory in the Graphics: WebRender component

Memory safety bug fixed in Firefox 152

Denial-of-service in the PDF Viewer component

Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

Memory safety bugs fixed in Thunderbird 150.0.1

Denial-of-service in the Graphics: WebGPU component

Information disclosure in the Graphics: ImageLib component

Information disclosure in the Framework component in DevTools

Information disclosure in the Storage: IndexedDB component

Memory safety bug fixed in Thunderbird ESR 140.12

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Other issue in the DOM: Copy & Paste and Drag & Drop component

Memory safety bug fixed in Firefox 152

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Firefox 152

Invalid pointer in the Security: PSM component

Off-by-one out of bounds read in MIME header parser for forwarding

Information disclosure due to malicious IMAP server response

One byte overflow read in mail parser

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152