Login Request a demo
TE
Product
Thunderbird Esr
by Mozilla · last CVE Jun 11, 2018
On CISA KEVExploited in the wild
228
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities228In the news0Timeline
Severity mix
Critical 6High 6Medium 6Low 0
Severity
All severities228Critical6High6Medium6Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Thunderbird Esr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-1690
In wildKEV
8.8
69%
Jun 26
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Affected: 17.0 before 17.0.7
CVE-2013-1675
In wildKEV
6.5
7%
May 16
Mozilla Firefox Information Disclosure Vulnerability
Affected: 17.0 before 17.0.6
CVE-2018-5183
9.8
3%
Jun 11
Mozilla developers backported selected changes in the Skia library
Affected: before 52.8.0
CVE-2018-5159
9.8
21%
Jun 11
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes
Affected: before 52.8.0
CVE-2018-5155
9.8
3%
Jun 11
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths
Affected: before 52.8.0
CVE-2018-5154
9.8
3%
Jun 11
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths
Affected: before 52.8.0
CVE-2018-5150
9.8
3%
Jun 11
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7
Affected: before 52.8.0
CVE-2017-5398
9.8
4%
Jun 11
Memory safety bugs were reported in Thunderbird 45.7
Affected: before 45.8.0
CVE-2012-5830
8.8
4%
Nov 21
Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before…
Affected: 10.0 before 10.0.11
CVE-2018-5178
8.1
5%
Jun 11
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data
Affected: before 52.8.0
CVE-2018-5184
7.5
2%
Jun 11
Using remote content in encrypted messages can lead to the disclosure of plaintext
Affected: before 52.8.0
CVE-2018-5174
7.5
2%
Jun 11
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any UI
Affected: before 52.8.0
CVE-2018-5162
7.5
2%
Jun 11
Plaintext of decrypted emails can leak through the src attribute of remote images, or links
Affected: before 52.8.0
CVE-2018-5185
6.5
2%
Jun 11
Plaintext of decrypted emails can leak through by user submitting an embedded form
Affected: before 52.8.0
CVE-2013-2566
5.9
84%
Mar 15
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via…
Affected: before 17.0.11
CVE-2018-5168
5.3
2%
Jun 11
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element
Affected: before 52.8.0
CVE-2018-5170
4.3
2%
Jun 11
It is possible to spoof the filename of an attachment and display an arbitrary attachment name
Affected: before 52.8.0
CVE-2018-5161
4.3
2%
Jun 11
Crafted message headers can cause a Thunderbird process to hang on receiving the message
Affected: before 52.8
CVE-2014-2018
–
2%
Feb 17
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +4 more
CVE-2013-6674
–
8%
Feb 17
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +5 more
CVE-2013-5604
–
6%
Oct 30
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1,…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +5 more
CVE-2013-5603
–
5%
Oct 30
Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before…
Affected: 17.0.9
CVE-2013-5602
–
5%
Oct 30
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before…
Affected: 17.0.9; 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; +5 more
CVE-2013-5601
–
5%
Oct 30
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,…
Affected: 17.0.9; 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; +5 more
CVE-2013-5600
–
5%
Oct 30
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,…
Affected: 17.0.9; 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; +5 more
CVE-2013-5599
–
5%
Oct 30
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +5 more
CVE-2013-5597
–
6%
Oct 30
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +5 more
CVE-2013-5596
–
3%
Oct 30
The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly…
Affected: 17.0.9
CVE-2013-5595
–
2%
Oct 30
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +4 more
CVE-2013-5593
–
2%
Oct 30
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the…
Affected: 17.0.9
CVE-2013-5591
–
4%
Oct 30
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote…
Affected: 17.0.9
CVE-2013-5590
–
5%
Oct 30
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1,…
Affected: 17.0.9; 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; +5 more
CVE-2013-1737
–
3%
Sep 18
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1736
–
5%
Sep 18
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1735
–
5%
Sep 18
Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0,…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1732
–
9%
Sep 18
Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1730
–
2%
Sep 18
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1726
–
0%
Sep 18
Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 does not…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1725
–
4%
Sep 18
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1722
–
6%
Sep 18
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9,…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1718
–
5%
Sep 18
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +3 more
CVE-2013-1717
–
2%
Aug 7
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1714
–
2%
Aug 7
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1713
–
2%
Aug 7
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1712
–
0%
Aug 7
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1710
–
42%
Aug 7
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1709
–
1%
Aug 7
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1707
–
0%
Aug 7
Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1706
–
0%
Aug 7
Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
CVE-2013-1701
–
5%
Aug 7
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before…
Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +2 more
Page 1 of 5 · 228 total
12…5