thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 HighthunderbirdDebianEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumthunderbirdDebianIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighthunderbirdDebianIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighthunderbirdDebianA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighthunderbirdDebianSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumthunderbirdDebianNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowthunderbirdDebianA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighthunderbirdDebianAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighthunderbirdDebianA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumthunderbirdDebianEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighthunderbirdDebianWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighthunderbirdDebianA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumthunderbirdDebianDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumthunderbirdDebianA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalthunderbirdDebianPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighthunderbirdDebianWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalthunderbirdDebianInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalthunderbirdDebianA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighthunderbirdDebianA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighthunderbirdDebianA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalthunderbirdDebianA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdDebianA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalthunderbirdDebianA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalthunderbirdDebianImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumthunderbirdDebianA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalthunderbirdDebianIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumthunderbirdDebianThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalthunderbirdDebianCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumthunderbirdDebianA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalthunderbirdDebianA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalthunderbirdDebianA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumthunderbirdDebianThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalthunderbirdDebianThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalthunderbirdDebianA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalthunderbirdDebianLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 MediumthunderbirdDebianA crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted...7.5 HighthunderbirdDebianA use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The...9.8 CriticalthunderbirdDebianIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumthunderbirdDebianpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumthunderbirdDebianWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumthunderbirdDebianAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Critical- Show moreLoading…