Vulnerabilities > Mozilla > Thunderbird > 78.7.1

DATE CVE VULNERABILITY TITLE RISK
2021-03-31 CVE-2021-23981 Out-of-bounds Write vulnerability in Mozilla Firefox
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
network
low complexity
mozilla CWE-787
8.1
2021-02-26 CVE-2021-23978 Out-of-bounds Write vulnerability in multiple products
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
network
low complexity
mozilla debian CWE-787
8.8
2021-02-26 CVE-2021-23973 Information Exposure Through an Error Message vulnerability in multiple products
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.
network
low complexity
mozilla debian CWE-209
6.5
2021-02-26 CVE-2021-23969 As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects.
network
low complexity
mozilla debian
4.3
2021-02-26 CVE-2021-23968 Information Exposure Through an Error Message vulnerability in multiple products
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI.
network
low complexity
mozilla debian CWE-209
4.3