thunderbird vulnerabilities (Alpine)
227 vulnerabilities.
thunderbirdAlpineWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdAlpineRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdAlpineAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdAlpineDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighthunderbirdAlpineWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdAlpineMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdAlpineDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdAlpineWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdAlpineBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdAlpineIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdAlpineAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdAlpine<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdAlpinePreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdAlpineIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdAlpineWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdAlpineAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdAlpineRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdAlpineAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalthunderbirdAlpineRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighthunderbirdAlpineA Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...7.1 HighthunderbirdAlpineIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdAlpineMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdAlpineWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdAlpineWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdAlpineWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdAlpineIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdAlpineIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdAlpineIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdAlpineA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 MediumthunderbirdAlpineThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 HighthunderbirdAlpineMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdAlpineMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdAlpineAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdAlpineSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdAlpineWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdAlpineWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdAlpineWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdAlpineCertain network request objects were freed too early when releasing a network request handle....8.8 HighthunderbirdAlpineMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumthunderbirdAlpineApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighthunderbirdAlpineConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdAlpineIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalthunderbirdAlpineWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 MediumthunderbirdAlpineThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalthunderbirdAlpineThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdAlpineMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdAlpineIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdAlpineUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdAlpineDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdAlpineUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Medium- Show moreLoading…