thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalthunderbirdDebianCross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumthunderbirdDebianA flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird...5.3 MediumthunderbirdDebianA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalthunderbirdDebianA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumthunderbirdDebianA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalthunderbirdDebianAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighthunderbirdDebianIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighthunderbirdDebianA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighthunderbirdDebianWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighthunderbirdDebianWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighthunderbirdDebianA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighthunderbirdDebianA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...6.5 MediumthunderbirdDebianIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumthunderbirdDebianA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalthunderbirdDebianMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalthunderbirdDebianPlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...4.3 MediumthunderbirdDebiandDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...6.5 MediumthunderbirdDebianDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...6.5 MediumthunderbirdDebianMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalthunderbirdDebianMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 CriticalthunderbirdDebianA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalthunderbirdDebianAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 HighthunderbirdDebianIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 MediumthunderbirdDebianAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumthunderbirdDebianA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumthunderbirdDebianNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighthunderbirdDebianA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighthunderbirdDebianAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighthunderbirdDebianAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 HighthunderbirdDebianA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighthunderbirdDebianA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighthunderbirdDebianPlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 MediumthunderbirdDebianUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 HighthunderbirdDebianIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 MediumthunderbirdDebianPlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 HighthunderbirdDebianCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 MediumthunderbirdDebianMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalthunderbirdDebianA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighthunderbirdDebianSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumthunderbirdDebianAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalthunderbirdDebianMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalthunderbirdDebianAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 High- Show moreLoading…