thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxAddress bar spoofing via bidirectional characters6.5 MediumthunderbirdAlmaLinuxMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalthunderbirdAlmaLinuxDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighthunderbirdAlmaLinuxA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumthunderbirdAlmaLinuxDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighthunderbirdAlmaLinuxIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdAlmaLinuxNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumthunderbirdAlmaLinuxVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 HighthunderbirdAlmaLinuxElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalthunderbirdAlmaLinuxDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumthunderbirdAlmaLinuxA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumthunderbirdAlmaLinuxDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighthunderbirdAlmaLinuxBrowsing Context potentially not cleared when closing Private Window7.5 HighthunderbirdAlmaLinuxXLL file extensions were downloadable without warnings4.3 MediumthunderbirdAlmaLinuxPush notifications saved to disk unencrypted6.5 MediumthunderbirdAlmaLinuxError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumthunderbirdAlmaLinuxMemory corruption in JIT UpdateRegExpStatics6.5 MediumthunderbirdAlmaLinuxMemory corruption in IPC FilePickerShownCallback6.5 MediumthunderbirdAlmaLinuxMemory corruption in IPC ColorPickerShownCallback6.5 MediumthunderbirdAlmaLinuxMemory corruption in IPC CanvasTranslator6.5 MediumthunderbirdAlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalthunderbirdAlmaLinuxWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighthunderbirdAlmaLinuxFull screen notification obscured by external program6.5 MediumthunderbirdAlmaLinuxFull screen notification obscured by file open dialog7.5 HighthunderbirdAlmaLinuxIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighthunderbirdAlmaLinuxRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumthunderbirdAlmaLinuxAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighthunderbirdAlmaLinuxA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdAlmaLinuxIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumthunderbirdAlmaLinuxOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumthunderbirdAlmaLinuxFile Extension Spoofing using the Text Direction Override Character7.5 HighthunderbirdAlmaLinuxUse-after-free in workers8.8 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighthunderbirdAlmaLinuxWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighthunderbirdAlmaLinuxA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumthunderbirdAlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdAlmaLinuxAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdAlmaLinuxThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdAlmaLinuxMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighthunderbirdAlmaLinuxWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdAlmaLinuxAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdAlmaLinuxA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdAlmaLinuxA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdAlmaLinuxAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdAlmaLinuxIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Medium- Show moreLoading…