thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 HighthunderbirdDebianAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 CriticalthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighthunderbirdDebianA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumthunderbirdDebianUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumthunderbirdDebianA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighthunderbirdDebianWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumthunderbirdDebianAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumthunderbirdDebianIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighthunderbirdDebianFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighthunderbirdDebianPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighthunderbirdDebianUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighthunderbirdDebianIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumthunderbirdDebianUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighthunderbirdDebianDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighthunderbirdDebianWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumthunderbirdDebianUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumthunderbirdDebianWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumthunderbirdDebianWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighthunderbirdDebianCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighthunderbirdDebianCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighthunderbirdDebianUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumthunderbirdDebianWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighthunderbirdDebianSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumthunderbirdDebianWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumthunderbirdDebianIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighthunderbirdDebianDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighthunderbirdDebianFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumthunderbirdDebianIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumthunderbirdDebianIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumthunderbirdDebianA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumthunderbirdDebianSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumthunderbirdDebianIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalthunderbirdDebianUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighthunderbirdDebianWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighthunderbirdDebianBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumthunderbirdDebianFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighthunderbirdDebianWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighthunderbirdDebianBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighthunderbirdDebianBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumthunderbirdDebianInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumthunderbirdDebianIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...5.9 MediumthunderbirdDebianWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Medium- Show moreLoading…