thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalthunderbirdDebianThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdDebianMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdDebianIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdDebianUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdDebianDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdDebianUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdDebianWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdDebianFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdDebianBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdDebianAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdDebianUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdDebianThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 CriticalthunderbirdDebianA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdDebianMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdDebianDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdDebianBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdDebianThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdDebianThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdDebianWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdDebianThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdDebianThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdDebianDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdDebianFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdDebianA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdDebianA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdDebianInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdDebianUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdDebianIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdDebianMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdDebianA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdDebianOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdDebianMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdDebianIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdDebianOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumthunderbirdDebianWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 HighthunderbirdDebianSignatures are written to disk before and read during verification, which might be subject to a...2.5 LowthunderbirdDebianPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighthunderbirdDebianThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumthunderbirdDebianWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighthunderbirdDebianIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighthunderbirdDebianThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumthunderbirdDebianWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighthunderbirdDebianA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighthunderbirdDebianAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 MediumthunderbirdDebianThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumthunderbirdDebianIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 Medium- Show moreLoading…