thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdDebianUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumthunderbirdDebianIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdDebianKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdDebianWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighthunderbirdDebianCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumthunderbirdDebianWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumthunderbirdDebianThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighthunderbirdDebianThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumthunderbirdDebianIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalthunderbirdDebianFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumthunderbirdDebianThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumthunderbirdDebianService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumthunderbirdDebianMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdDebianIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumthunderbirdDebianCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighthunderbirdDebianA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighthunderbirdDebianInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumthunderbirdDebianAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 MediumthunderbirdDebianMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighthunderbirdDebianConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumthunderbirdDebianDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumthunderbirdDebianBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumthunderbirdDebianWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumthunderbirdDebianPrototype pollution in matrix-js-sdk8.2 HighthunderbirdDebianWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumthunderbirdDebianIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighthunderbirdDebianWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumthunderbirdDebianMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighthunderbirdDebianMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdDebianA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighthunderbirdDebianA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighthunderbirdDebianAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumthunderbirdDebianMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighthunderbirdDebianWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighthunderbirdDebianWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumthunderbirdDebianAn OpenPGP digital signature includes information about the date when the signature was created....6.5 MediumthunderbirdDebianThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighthunderbirdDebianIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighthunderbirdDebianA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumthunderbirdDebianIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumthunderbirdDebianSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalthunderbirdDebianAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighthunderbirdDebianIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighthunderbirdDebianMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 CriticalthunderbirdDebianAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumthunderbirdDebianAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumthunderbirdDebianA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighthunderbirdDebianOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighthunderbirdDebianWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 Medium- Show moreLoading…