Tracked app vulnerabilities

When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distri…

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac…

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc hea…

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32…

When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary c…

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should…

Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox E…

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been expl…

A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10,…

An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a sub…

Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key,…

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet b…

Windows Hyper-V Denial of Service Vulnerability

Server for NFS Information Disclosure Vulnerability

Server for NFS Information Disclosure Vulnerability

Server for NFS Denial of Service Vulnerability

Windows GPSVC Elevation of Privilege Vulnerability

Event Tracing for Windows Information Disclosure Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Remote Desktop Services Denial of Service Vulnerability

Kerberos AppContainer Security Feature Bypass Vulnerability

Windows Bind Filter Driver Information Disclosure Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows NTLM Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Filter Manager Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows DCOM Server Security Feature Bypass

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server co…

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows SMB Client Security Feature Bypass Vulnerability

OLE Automation Remote Code Execution Vulnerability

Windows SSDP Service Elevation of Privilege Vulnerability

Windows Media Foundation Core Remote Code Execution Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Desktop Bridge Denial of Service Vulnerability