thunderbird vulnerabilities (AlmaLinux)
809 vulnerabilities.
thunderbirdAlmaLinuxMitigation bypass in the DOM: Security component8.1 HighthunderbirdAlmaLinuxSame-origin policy bypass in the DOM: Notifications component8.1 HighthunderbirdAlmaLinuxIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 HighthunderbirdAlmaLinuxSpoofing issue in Firefox3.4 LowthunderbirdAlmaLinuxUse-after-free in the Audio/Video component8.8 HighthunderbirdAlmaLinuxMitigation bypass in the DOM: Core & HTML component6.1 MediumthunderbirdAlmaLinuxRace condition in the Graphics component7.5 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdAlmaLinuxAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumthunderbirdAlmaLinuxSome non-writable Object properties could be modified6.5 MediumthunderbirdAlmaLinuxCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdAlmaLinuxOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdAlmaLinuxUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdAlmaLinuxInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdAlmaLinuxInteger overflow in the SVG component8.8 HighthunderbirdAlmaLinuxIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdAlmaLinuxSame-origin policy bypass in the Layout component6.5 MediumthunderbirdAlmaLinuxSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdAlmaLinuxSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdAlmaLinuxDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdAlmaLinuxUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdAlmaLinuxSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdAlmaLinuxSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdAlmaLinuxIncorrect JavaScript state machine for generators6.5 MediumthunderbirdAlmaLinuxXSLT documents could bypass CSP8.1 HighthunderbirdAlmaLinuxIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdAlmaLinuxPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdAlmaLinuxjavascript: URLs executed on object and embed tags8.1 HighthunderbirdAlmaLinuxLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdAlmaLinuxJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdAlmaLinuxContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdAlmaLinuxIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdAlmaLinuxThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdAlmaLinuxUse-after-free in FontFaceSet9.8 CriticalthunderbirdAlmaLinuxUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdAlmaLinuxUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumthunderbirdAlmaLinuxMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdAlmaLinuxMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdAlmaLinuxClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdAlmaLinuxScript element events leaked cross-origin resource status4.3 MediumthunderbirdAlmaLinuxPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdAlmaLinuxError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdAlmaLinuxOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdAlmaLinuxOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdAlmaLinuxTracking Links in Attachments Bypassed Remote Content Blocking6.5 Medium- Show moreLoading…