thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighthunderbirdDebianWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighthunderbirdDebianManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumthunderbirdDebianDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighthunderbirdDebianIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighthunderbirdDebianMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighthunderbirdDebianWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumthunderbirdDebianNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumthunderbirdDebianUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighthunderbirdDebianBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumthunderbirdDebianA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalthunderbirdDebianThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumthunderbirdDebianA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighthunderbirdDebianMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalthunderbirdDebianOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighthunderbirdDebianWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighthunderbirdDebianUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighthunderbirdDebianUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalthunderbirdDebianThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumthunderbirdDebianThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighthunderbirdDebianWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighthunderbirdDebianBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighthunderbirdDebianWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighthunderbirdDebianusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumthunderbirdDebianWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 MediumthunderbirdDebianIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumthunderbirdDebianWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumthunderbirdDebianWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighthunderbirdDebianIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumthunderbirdDebianIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighthunderbirdDebianWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdDebianDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighthunderbirdDebianWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighthunderbirdDebianUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighthunderbirdDebianUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighthunderbirdDebianWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighthunderbirdDebianThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighthunderbirdDebianFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumthunderbirdDebianIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumthunderbirdDebianBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumthunderbirdDebianA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighthunderbirdDebianAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighthunderbirdDebianWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 High- Show moreLoading…