thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdAlmaLinuxA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighthunderbirdAlmaLinuxSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdAlmaLinuxMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdAlmaLinuxUnsafe attribute access during XPath parsing4.8 MediumthunderbirdAlmaLinuxProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdAlmaLinuxPrivilege escalation in Thunderbird Updater8.8 HighthunderbirdAlmaLinuxUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdAlmaLinuxLeak of hashed Window credentials via crafted attachment URL6.3 MediumthunderbirdAlmaLinuxInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdAlmaLinuxURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdAlmaLinuxUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdAlmaLinuxCrafted email message incorrectly shown as being encrypted7.0 HighthunderbirdAlmaLinuxDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdAlmaLinuxUnsanitized address book fields5.4 MediumthunderbirdAlmaLinuxAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdAlmaLinuxCertificate length was not properly checked8.8 HighthunderbirdAlmaLinuxPotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdAlmaLinuxUse-after-free during concurrent delazification7.5 HighthunderbirdAlmaLinuxA bug in WebAssembly code generation could result in a crash8.8 HighthunderbirdAlmaLinuxUse-after-free in Custom Highlight8.8 HighthunderbirdAlmaLinuxUse-after-free in XSLT9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdAlmaLinuxMemory corruption when using JavaScript Text Segmentation7.7 HighthunderbirdAlmaLinuxCompartment mismatch when parsing JavaScript JSON module4.0 MediumthunderbirdAlmaLinuxAlt-Svc ALPN validation failure when redirected4.0 MediumthunderbirdAlmaLinuxUse-after-free when breaking lines in text5.3 MediumthunderbirdAlmaLinuxWebChannel APIs susceptible to confused deputy attack5.4 MediumthunderbirdAlmaLinuxidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 MediumthunderbirdAlmaLinuxMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighthunderbirdAlmaLinuxWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighthunderbirdAlmaLinuxThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumthunderbirdAlmaLinuxA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumthunderbirdAlmaLinuxEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumthunderbirdAlmaLinuxAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumthunderbirdAlmaLinuxUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 MediumthunderbirdAlmaLinuxMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighthunderbirdAlmaLinuxBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighthunderbirdAlmaLinuxA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumthunderbirdAlmaLinuxRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumthunderbirdAlmaLinuxVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumthunderbirdAlmaLinuxTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumthunderbirdAlmaLinuxIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Medium- Show moreLoading…