thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdAlmaLinuxRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdAlmaLinuxAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdAlmaLinuxDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighthunderbirdAlmaLinuxWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdAlmaLinuxMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdAlmaLinuxDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdAlmaLinuxWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdAlmaLinuxBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdAlmaLinuxIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdAlmaLinuxAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdAlmaLinux<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdAlmaLinuxWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighthunderbirdAlmaLinuxPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdAlmaLinuxIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdAlmaLinuxWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdAlmaLinuxAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdAlmaLinuxRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdAlmaLinuxAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalthunderbirdAlmaLinuxRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighthunderbirdAlmaLinuxIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalthunderbirdAlmaLinuxIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdAlmaLinuxxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalthunderbirdAlmaLinuxxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalthunderbirdAlmaLinuxMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdAlmaLinuxWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdAlmaLinuxWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdAlmaLinuxWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdAlmaLinuxIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdAlmaLinuxIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdAlmaLinuxIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdAlmaLinuxMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdAlmaLinuxMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdAlmaLinuxAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdAlmaLinuxSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdAlmaLinuxWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdAlmaLinuxWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdAlmaLinuxWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdAlmaLinuxCertain network request objects were freed too early when releasing a network request handle....8.8 HighthunderbirdAlmaLinuxMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumthunderbirdAlmaLinuxApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighthunderbirdAlmaLinuxConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdAlmaLinuxIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalthunderbirdAlmaLinuxThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdAlmaLinuxIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdAlmaLinuxUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdAlmaLinuxDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdAlmaLinuxUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdAlmaLinuxWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdAlmaLinuxFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 High- Show moreLoading…