The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0657 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 78.8.0.

    Security Fix(es):

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23968)

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23969)

    * Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978)

    * Mozilla: MediaError message property could have leaked information about cross-origin resources     (CVE-2021-23973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0659 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.8.0 ESR.

    Security Fix(es):

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23968)

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23969)

    * Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978)

    * Mozilla: MediaError message property could have leaked information about cross-origin resources     (CVE-2021-23973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities:

  - Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (CVE-2020-16042)

  - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially     exploit heap corruption via a crafted SCTP packet. (CVE-2020-16044)

  - Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow     on some video drivers. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR <     78.6. (CVE-2020-26971)

  - Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This     could have been used as a sanitizer bypass. This vulnerability affects Firefox < 84, Thunderbird < 78.6,     and Firefox ESR < 78.6. (CVE-2020-26973)

  - When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly     cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially     exploitable crash. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.
    (CVE-2020-26974)

  - When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former,     the service worker could have intercepted the request for the secure page despite the iframe not being a     secure context due to the (insecure) framing. This vulnerability affects Firefox < 84. (CVE-2020-26976)

  - Using techniques that built on the slipstream research, a malicious webpage could have exposed both an     internal network's hosts as well as services running on the user's local machine. This vulnerability     affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. (CVE-2020-26978)

  - When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback     was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening     View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84,     Thunderbird < 78.6, and Firefox ESR < 78.6. (CVE-2020-35111)

  - Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and     Firefox ESR < 78.6. (CVE-2020-35113)

  - If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-     origin information, when said information is served as chunked data. This vulnerability affects Firefox <     85, Thunderbird < 78.7, and Firefox ESR < 78.7. (CVE-2021-23953)

  - Using the new logical assignment operators in a JavaScript switch statement could have caused a type     confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects     Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7. (CVE-2021-23954)

  - Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a     potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox     ESR < 78.7. (CVE-2021-23960)

  - Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and     Firefox ESR < 78.7. (CVE-2021-23964)

  - If Content Security Policy blocked frame navigation, the full destination of a redirect served in the     frame was reported in the violation report; as opposed to the original frame URI. This could be used to     leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird <     78.8, and Firefox ESR < 78.8. (CVE-2021-23968)

  - As specified in the W3C Content Security Policy draft, when creating a violation report, User agents need     to ensure that the source file is the URL requested by the page, pre-redirects. If that's not possible,     user agents need to strip the URL down to an origin to avoid unintentional leakage. Under certain types     of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was     fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird <     78.8, and Firefox ESR < 78.8. (CVE-2021-23969)

  - When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted,     and the content of that error may have revealed information about the resource. This vulnerability affects     Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8. (CVE-2021-23973)

  - Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and     Firefox ESR < 78.8. (CVE-2021-23978)

  - A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer     used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
    This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. (CVE-2021-23981)

  - Using techniques that built on the slipstream research, a malicious webpage could have scanned both an     internal network's hosts as well as services running on the user's local machine utilizing WebRTC     connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
    (CVE-2021-23982)

  - A malicious extension could have opened a popup window lacking an address bar. The title of the popup     lacking an address bar should not be fully controllable, but in this situation was. This could have been     used to spoof a website and attempt to trick the user into providing credentials. This vulnerability     affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. (CVE-2021-23984)

  - Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR     78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some     of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.9,     Firefox < 87, and Thunderbird < 78.9. (CVE-2021-23987)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 78.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-09 advisory.

  - Mozilla developers Alexis Beingessner, Tyson Smith, Nika Layzell, and Mats Palmgren reported memory safety     bugs present in Thunderbird 78.7. Some of these bugs showed evidence of memory corruption and we presume     that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2021-23978)

  - As specified in the W3C Content Security Policy draft, when creating a violation report, User agents need     to ensure that the source file is the URL requested by the page, pre-redirects. If thats not possible,     user agents need to strip the URL down to an origin to avoid unintentional leakage. Under certain types     of redirects, Thunderbird incorrectly set the source file to be the destination of the redirects. This was     fixed to be the redirect destination's origin. (CVE-2021-23969)

  - If Content Security Policy blocked frame navigation, the full destination of a redirect served in the     frame was reported in the violation report; as opposed to the original frame URI. This could be used to     leak sensitive information contained in such URIs. (CVE-2021-23968)

  - When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted,     and the content of that error may have revealed information about the resource. (CVE-2021-23973)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0660 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.8.0 ESR.

    Security Fix(es):

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23968)

    * Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23969)

    * Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978)

    * Mozilla: MediaError message property could have leaked information about cross-origin resources     (CVE-2021-23973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0656 advisory.

    [78.8.0-1.0.1]
    - Remove upstream references [Orabug: 30143292]
    - Update distribution for Oracle Linux [Orabug: 30143292]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [78.8.0-1]
    - Update to 78.8.0 build2

    [78.7.1-1]
    - Update to 78.7.1

    [78.7.0-3]
    - Fixing install prefix for the homepage

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

Firefox Extended Support Release 78.8.0 ESR

  - Fixed: Various stability, functionality, and security     fixes MFSA 2021-08 (bsc#1182614)

  - CVE-2021-23969: Content Security Policy violation report     could have contained the destination of a redirect

  - CVE-2021-23968: Content Security Policy violation report     could have contained the destination of a redirect

  - CVE-2021-23973: MediaError message property could have     leaked information about cross-origin resources

  - CVE-2021-23978: Memory safety bugs fixed in Firefox 86     and Firefox ESR 78.8

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure.

For Debian 9 stretch, these problems have been fixed in version 1:78.8.0-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0656-1 advisory.

  - Mozilla: Content Security Policy violation report could have contained the destination of a redirect     (CVE-2021-23968, CVE-2021-23969)

  - Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978)

  - Mozilla: MediaError message property could have leaked information about cross-origin resources     (CVE-2021-23973)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and     Firefox ESR < 78.8. (CVE-2021-23978)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1569:03 advisory.

    * Mozilla: Content Security Policy violation report could have contained the     destination of a redirect (CVE-2021-23968)
      * Mozilla: Content Security Policy violation report could have contained the     destination of a redirect (CVE-2021-23969)
      * Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8     (CVE-2021-23978)
      * Mozilla: MediaError message property could have leaked information about     cross-origin resources (CVE-2021-23973)
      * Mozilla: Cross-origin information leakage via redirected PDF requests     (CVE-2021-23953)
      * Mozilla: Type confusion when using logical assignment operators in     JavaScript switch statements (CVE-2021-23954)
      * Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7     (CVE-2021-23964)
      * Mozilla: IMAP Response Injection when using STARTTLS (CVE-2020-15685)
      * Mozilla: HTTPS pages could have been intercepted by a registered service     worker when they should not have been (CVE-2020-26976)
      * Mozilla: Use-after-poison for incorrectly redeclared JavaScript variables     during GC (CVE-2021-23960)
      * Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP     chunk (CVE-2020-16044)
      * chromium-browser: Uninitialized Use in V8 (CVE-2020-16042)
      * Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971)
      * Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973)
      * Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap     use-after-free (CVE-2020-26974)
      * Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6     (CVE-2020-35113)
      * Mozilla: Internal network hosts could have been probed by a malicious     webpage (CVE-2020-26978)
      * Mozilla: The proxy.onRequest API did not catch view-source URLs     (CVE-2020-35111)
      * Mozilla: Stack overflow due to incorrect parsing of SMTP server response     codes (CVE-2020-26970)
      * Mozilla: Parsing mismatches could confuse and bypass security sanitizer for     chrome privileged code (CVE-2020-26951)
      * Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5     (CVE-2020-26968)
      * Mozilla: Variable time processing of cross-origin images during drawImage     calls (CVE-2020-16012)
      * Mozilla: Fullscreen could be enabled without displaying the security UI     (CVE-2020-26953)
      * Mozilla: XSS through paste (manual and clipboard API) (CVE-2020-26956)
      * Mozilla: Requests intercepted through ServiceWorkers lacked MIME type     restrictions (CVE-2020-26958)
      * Mozilla: Use-after-free in WebRequestService (CVE-2020-26959)
      * Mozilla: Potential use-after-free in uses of nsTArray (CVE-2020-26960)
      * Mozilla: DoH did not filter IPv4 mapped IP Addresses (CVE-2020-26961)
      * Mozilla: Software keyboards may have remembered typed passwords     (CVE-2020-26965)
      * Mozilla: Write side effects in MCallGetProperty opcode not accounted for     (CVE-2020-26950)     CVE(s):
    CVE-2021-23968     If Content Security Policy blocked frame navigation, the full destination of a redirect served in the     frame was reported in the violation report; as opposed to the original frame URI. This could be used to     leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird <     78.8, and Firefox ESR < 78.8.
    CVE-2021-23969     As specified in the W3C Content Security Policy draft, when creating a violation report, User agents need     to ensure that the source file is the URL requested by the page, pre-redirects. If thats not possible,     user agents need to strip the URL down to an origin to avoid unintentional leakage. Under certain types     of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was     fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird <     78.8, and Firefox ESR < 78.8.
    CVE-2021-23973     When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted,     and the content of that error may have revealed information about the resource. This vulnerability affects     Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
    CVE-2021-23978     Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and     Firefox ESR < 78.8.
    CVE-2020-15685
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.
    CVE-2020-26976     When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former,     the service worker could have intercepted the request for the secure page despite the iframe not being a     secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.
    CVE-2021-23953     If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-     origin information, when said information is served as chunked data. This vulnerability affects Firefox <     85, Thunderbird < 78.7, and Firefox ESR < 78.7.
    CVE-2021-23954     Using the new logical assignment operators in a JavaScript switch statement could have caused a type     confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects     Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.
    CVE-2021-23960     Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a     potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox     ESR < 78.7.
    CVE-2021-23964     Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and     Firefox ESR < 78.7.
    CVE-2020-16044     Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially     exploit heap corruption via a crafted SCTP packet.
    CVE-2020-16042     Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page.
    CVE-2020-26971     Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow     on some video drivers. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR <     78.6.
    CVE-2020-26973     Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This     could have been used as a sanitizer bypass. This vulnerability affects Firefox < 84, Thunderbird < 78.6,     and Firefox ESR < 78.6.
    CVE-2020-26974     When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly     cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially     exploitable crash. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.
    CVE-2020-26978     Using techniques that built on the slipstream research, a malicious webpage could have exposed both an     internal network's hosts as well as services running on the user's local machine. This vulnerability     affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.
    CVE-2020-35111     When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not     triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source     could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84, Thunderbird <     78.6, and Firefox ESR < 78.6.
    CVE-2020-35113     Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and     Firefox ESR < 78.6.
    CVE-2020-26970     When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that     is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to     stack corruption that may be exploitable. This vulnerability affects Thunderbird < 78.5.1.
    CVE-2020-16012     Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote     attacker to leak cross-origin data via a crafted HTML page.
    CVE-2020-26951     A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even     after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal     pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox <     83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26953     It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus     making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects     Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26956     In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and     therefore lead to XSS. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird <     78.5.
    CVE-2020-26958     Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and     cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a     Content Security Policy bypass. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and     Thunderbird < 78.5.
    CVE-2020-26959     During browser shutdown, reference decrementing could have occured on a previously freed object, resulting     in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects     Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26960     If the Compact() method was called on an nsTArray, the array could have been reallocated without updating     other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects     Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26961     When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses     as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped through     IPv6, these addresses were erroneously let through, leading to a potential DNS Rebinding attack. This     vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26965     Some websites have a feature Show Password where clicking a button will change a password field into a     textbook field, revealing the typed password. If, when using a software keyboard that remembers user     input, a user typed their password and used that feature, the type of the password field was changed,     resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed     password. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
    CVE-2020-26968     Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and     Thunderbird < 78.5.
    CVE-2020-26950     In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in     an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR <     78.4.1, and Thunderbird < 78.4.2.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
146815	RHEL 8 : thunderbird (RHSA-2021:0657)	Nessus	Red Hat Local Security Checks	2/24/2021	11/7/2024	high
146817	RHEL 8 : firefox (RHSA-2021:0659)	Nessus	Red Hat Local Security Checks	2/24/2021	11/7/2024	high
154489	NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0120)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	10/27/2021	high
146784	Mozilla Thunderbird < 78.8	Nessus	MacOS X Local Security Checks	2/23/2021	11/18/2025	high
146811	RHEL 8 : firefox (RHSA-2021:0660)	Nessus	Red Hat Local Security Checks	2/24/2021	11/7/2024	high
146865	Oracle Linux 7 : firefox (ELSA-2021-0656)	Nessus	Oracle Linux Local Security Checks	2/26/2021	10/23/2024	high
146940	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2021:0667-1)	Nessus	SuSE Local Security Checks	3/2/2021	6/3/2021	high
146945	Debian DLA-2578-1 : thunderbird security update	Nessus	Debian Local Security Checks	3/2/2021	3/8/2021	high
148973	Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0656)	Nessus	Scientific Linux Local Security Checks	4/23/2021	4/23/2021	high
243600	Linux Distros Unpatched Vulnerability : CVE-2021-23978	Nessus	Misc.	8/5/2025	7/24/2026	high
294225	MiracleLinux 8 : thunderbird-78.8.0-1.0.1.el8 (AXSA:2021-1569:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	2/4/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high