thunderbird vulnerabilities (Alpine)
227 vulnerabilities.
thunderbirdAlpineWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdAlpineFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdAlpineBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdAlpineAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdAlpineUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdAlpineThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighthunderbirdAlpineMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumthunderbirdAlpineA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdAlpineMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdAlpineDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdAlpineBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdAlpineThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdAlpineThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdAlpineWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdAlpineThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdAlpineThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdAlpineDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighthunderbirdAlpineThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdAlpineDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdAlpineMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighthunderbirdAlpineWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdAlpineFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdAlpineFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdAlpineAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumthunderbirdAlpineA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdAlpineA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdAlpineInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdAlpineDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumthunderbirdAlpineAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighthunderbirdAlpineUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdAlpineData race in crossbeam-deque9.8 CriticalthunderbirdAlpineIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdAlpineA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdAlpineOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdAlpineA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighthunderbirdAlpineThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 MediumthunderbirdAlpineMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdAlpineIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdAlpineOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumthunderbirdAlpineSignatures are written to disk before and read during verification, which might be subject to a...2.5 LowthunderbirdAlpinePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighthunderbirdAlpineThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumthunderbirdAlpineWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighthunderbirdAlpineIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighthunderbirdAlpineThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Medium- Show moreLoading…