Vulnérabilités des apps suivies

Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects…

Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability aff…

When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunder…

By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock…

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < …

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level…

Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top a…

By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could hav…

The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HT…

Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on…

Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it…

Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted mes…

Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusi…

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in In…

Windows Storage Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Windows Key Storage Provider Security Feature Bypass Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Installer Denial of Service Vulnerability

Windows Authenticode Spoofing Vulnerability

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw…

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still…

Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. Th…

Windows Cryptographic Primitives Library Information Disclosure Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Scripting Engine Memory Corruption Vulnerability

If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha…

Windows Hello Security Feature Bypass Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows DNS Server Denial of Service Vulnerability

GDI+ Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Windows Remote Assistance Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows Partition Management Driver Elevation of Privilege Vulnerability

Win32k Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Authenticode Spoofing Vulnerability

Windows Installer Spoofing Vulnerability