thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxRibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumthunderbirdAlmaLinuxOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdAlmaLinuxMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdAlmaLinuxA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdAlmaLinuxFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdAlmaLinuxWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdAlmaLinuxAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdAlmaLinuxFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdAlmaLinuxA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdAlmaLinuxUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdAlmaLinuxPrototype pollution in matrix-js-sdk8.2 HighthunderbirdAlmaLinuxMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdAlmaLinuxDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdAlmaLinuxWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdAlmaLinuxWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdAlmaLinuxSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdAlmaLinuxA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighthunderbirdAlmaLinuxIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdAlmaLinuxMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdAlmaLinuxMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdAlmaLinuxWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdAlmaLinuxModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdAlmaLinuxAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdAlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdAlmaLinuxWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdAlmaLinuxA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdAlmaLinuxPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighthunderbirdAlmaLinuxThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdAlmaLinuxAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdAlmaLinuxCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdAlmaLinuxCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdAlmaLinuxContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdAlmaLinuxURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdAlmaLinuxMalicious command could be hidden in devtools output on Windows6.5 MediumthunderbirdAlmaLinuxArbitrary file read from GTK drag and drop on Linux6.5 MediumthunderbirdAlmaLinuxBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdAlmaLinuxAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdAlmaLinuxA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalthunderbirdAlmaLinuxAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighthunderbirdAlmaLinuxA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumthunderbirdAlmaLinuxMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighthunderbirdAlmaLinuxA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighthunderbirdAlmaLinuxAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighthunderbirdAlmaLinuxIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighthunderbirdAlmaLinuxMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdAlmaLinuxUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumthunderbirdAlmaLinuxIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdAlmaLinuxKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdAlmaLinuxWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 High- Show moreLoading…