thunderbird vulnerabilities (Alpine)
227 vulnerabilities.
thunderbirdAlpineWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighthunderbirdAlpineA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighthunderbirdAlpineMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighthunderbirdAlpineA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumthunderbirdAlpineUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumthunderbirdAlpineA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighthunderbirdAlpineWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumthunderbirdAlpineAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumthunderbirdAlpineIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighthunderbirdAlpineFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighthunderbirdAlpinePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighthunderbirdAlpineUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighthunderbirdAlpineIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumthunderbirdAlpineUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighthunderbirdAlpineDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighthunderbirdAlpineIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 HighthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighthunderbirdAlpineWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumthunderbirdAlpineUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumthunderbirdAlpineWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumthunderbirdAlpineWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighthunderbirdAlpineCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighthunderbirdAlpineCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighthunderbirdAlpineUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumthunderbirdAlpineWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighthunderbirdAlpineSearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighthunderbirdAlpineSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumthunderbirdAlpineWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumthunderbirdAlpineIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighthunderbirdAlpineDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighthunderbirdAlpineFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumthunderbirdAlpineIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumthunderbirdAlpineIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumthunderbirdAlpineA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumthunderbirdAlpineSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumthunderbirdAlpineIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighthunderbirdAlpineMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalthunderbirdAlpineHeap buffer overflow in CefSharp9.6 CriticalthunderbirdAlpineUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighthunderbirdAlpineWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumthunderbirdAlpineWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighthunderbirdAlpineWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighthunderbirdAlpineManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumthunderbirdAlpineDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighthunderbirdAlpineIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighthunderbirdAlpineMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 High- Show moreLoading…