thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumthunderbirdAlmaLinuxAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighthunderbirdAlmaLinuxA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighthunderbirdAlmaLinuxAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalthunderbirdAlmaLinuxA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighthunderbirdAlmaLinuxA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighthunderbirdAlmaLinuxBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumthunderbirdAlmaLinuxA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumthunderbirdAlmaLinuxIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighthunderbirdAlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdAlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdAlmaLinuxA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalthunderbirdAlmaLinuxWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 MediumthunderbirdAlmaLinuxMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalthunderbirdAlmaLinuxIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumthunderbirdAlmaLinuxA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalthunderbirdAlmaLinuxThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalthunderbirdAlmaLinuxInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighthunderbirdAlmaLinuxA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalthunderbirdAlmaLinuxThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumthunderbirdAlmaLinuxIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighthunderbirdAlmaLinuxUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighthunderbirdAlmaLinuxANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumthunderbirdAlmaLinuxIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighthunderbirdAlmaLinuxEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighthunderbirdAlmaLinuxIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighthunderbirdAlmaLinuxA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighthunderbirdAlmaLinuxInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalthunderbirdAlmaLinuxSelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumthunderbirdAlmaLinuxType Confusion in Async Generators in Javascript Engine7.5 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighthunderbirdAlmaLinuxMemory corruption in thread creation7.4 HighthunderbirdAlmaLinuxRace condition in permission assignment4.7 MediumthunderbirdAlmaLinuxMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighthunderbirdAlmaLinuxBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighthunderbirdAlmaLinuxOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumthunderbirdAlmaLinuxBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumthunderbirdAlmaLinuxBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumthunderbirdAlmaLinuxIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighthunderbirdAlmaLinuxMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighthunderbirdAlmaLinuxWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighthunderbirdAlmaLinuxWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumthunderbirdAlmaLinuxA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumthunderbirdAlmaLinuxIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumthunderbirdAlmaLinuxPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighthunderbirdAlmaLinuxMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 High- Show moreLoading…