Total vulnerabilities in the database
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | - | 138.0 |
| mozilla / firefox | - | 115.23 |
| mozilla / firefox | 128.0 | 128.10 |
| mozilla / thunderbird | - | 138.0 |
| mozilla / thunderbird | - | 128.10.0 |