thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdDebianAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdDebianA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdDebianA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdDebianAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdDebianIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumthunderbirdDebianRibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumthunderbirdDebianUse after free in libwebp5.3 MediumthunderbirdDebianOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdDebianMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdDebianA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdDebianFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdDebianWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdDebianAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdDebianFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdDebianA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdDebianUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdDebianPrototype pollution in matrix-js-sdk8.2 HighthunderbirdDebianMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdDebianDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdDebianWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdDebianWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdDebianSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdDebianIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdDebianMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdDebianMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdDebianWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdDebianModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdDebianAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdDebianCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdDebianWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdDebianA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdDebianPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighthunderbirdDebianThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdDebianAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdDebianCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdDebianCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdDebianContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdDebianURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdDebianArbitrary file read from GTK drag and drop on Linux6.5 MediumthunderbirdDebianBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdDebianAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdDebianA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalthunderbirdDebianAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighthunderbirdDebianA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumthunderbirdDebianMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighthunderbirdDebianA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighthunderbirdDebianAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighthunderbirdDebianIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 High- Show moreLoading…