RHSA-2018:3403HighCVSS 9.8

Red Hat Security Advisory: thunderbird security update

Published
October 30, 2018
Last Modified
June 27, 2026

🔗 CVE IDs covered (8)

CVE-2017-16541 →CVE-2018-12376 →CVE-2018-12377 →CVE-2018-12378 →CVE-2018-12379 →CVE-2018-12383 →CVE-2018-12385 →CVE-2018-18499 →

📋 Description

CVE-2017-16541 — Mozilla: Proxy bypass using automount and autofs CVE-2018-12376 — Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 CVE-2018-12377 — Mozilla: Use-after-free in driver timers CVE-2018-12378 — Mozilla: Use-after-free in IndexedDB CVE-2018-12379 — Mozilla: Out-of-bounds write with malicious MAR file CVE-2018-12383 — Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords CVE-2018-12385 — Mozilla: Crash in TransportSecurityInfo due to cached data CVE-2018-18499 — Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs

🔗 References (11)