vulnerability

Amazon Linux AMI 2: CVE-2018-12365: Security patch for thunderbird (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Oct 18, 2018

Added

Apr 27, 2020

Modified

May 20, 2026

Description

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Solutions

amazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo

References

AMAZON-AL2/ALAS-2018-1061
CVE-2018-12365
https://attackerkb.com/topics/CVE-2018-12365
CWE-200
EUVD-EUVD-2018-4339
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4339

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report