QID 354912

the mozilla foundation describes this issue as follows: ocsp revocation status of recipient certificates was not checked when sending s/mime encrypted email, and revoked certificates would be accepted.
Thunderbird versions from 68 to 102.9.1 were affected by this bug. (
( CVE-2023-0547) the mozilla foundation describes this issue as follows: unexpected data returned from the safe browsing api could have led to memory corruption and a potentially exploitable crash. (
( CVE-2023-1945) the mozilla foundation describes this issue as follows: certain malformed openpgp messages could trigger incorrect parsing of pkesk/skesk packets due to a bug in the ribose rnp library used by thunderbird up to version 102.9.1, which would cause the thunderbird user interface to hang.
The issue was discovered using googles oss-fuzz. (
( CVE-2023-29479) the mozilla foundation describes this issue as follows: a website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setinterval calls.
This could have led to user confusion and possible spoofing attacks. (
( CVE-2023-29533) the mozilla foundation describes this issue as follows: following a garbage collector compaction, weak maps may have been accessed before they were correctly traced.
This resulted in memory corruption and a potentially exploitable crash. (
( CVE-2023-29535) the mozilla foundation describes this issue as follows: an attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. (
( CVE-2023-29550)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.