thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumthunderbirdAlmaLinuxWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumthunderbirdAlmaLinuxThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighthunderbirdAlmaLinuxThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumthunderbirdAlmaLinuxIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalthunderbirdAlmaLinuxFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumthunderbirdAlmaLinuxThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumthunderbirdAlmaLinuxService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumthunderbirdAlmaLinuxMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdAlmaLinuxIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumthunderbirdAlmaLinuxCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighthunderbirdAlmaLinuxA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighthunderbirdAlmaLinuxMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighthunderbirdAlmaLinuxMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighthunderbirdAlmaLinuxMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighthunderbirdAlmaLinuxMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumthunderbirdAlmaLinuxInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumthunderbirdAlmaLinuxMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighthunderbirdAlmaLinuxConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumthunderbirdAlmaLinuxDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumthunderbirdAlmaLinuxBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumthunderbirdAlmaLinuxWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumthunderbirdAlmaLinuxlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighthunderbirdAlmaLinuxPrototype pollution in matrix-js-sdk8.2 HighthunderbirdAlmaLinuxWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumthunderbirdAlmaLinuxIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighthunderbirdAlmaLinuxWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumthunderbirdAlmaLinuxMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighthunderbirdAlmaLinuxMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdAlmaLinuxA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighthunderbirdAlmaLinuxA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighthunderbirdAlmaLinuxAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumthunderbirdAlmaLinuxMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighthunderbirdAlmaLinuxWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighthunderbirdAlmaLinuxWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumthunderbirdAlmaLinuxAn OpenPGP digital signature includes information about the date when the signature was created....6.5 MediumthunderbirdAlmaLinuxThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighthunderbirdAlmaLinuxIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighthunderbirdAlmaLinuxA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumthunderbirdAlmaLinuxIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumthunderbirdAlmaLinuxSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalthunderbirdAlmaLinuxAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighthunderbirdAlmaLinuxIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighthunderbirdAlmaLinuxAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumthunderbirdAlmaLinuxIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighthunderbirdAlmaLinuxAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighthunderbirdAlmaLinuxThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 MediumthunderbirdAlmaLinuxWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 MediumthunderbirdAlmaLinuxMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalthunderbirdAlmaLinuxFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 Medium- Show moreLoading…