thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 MediumthunderbirdDebianMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighthunderbirdDebianRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumthunderbirdDebianWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighthunderbirdDebianOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighthunderbirdDebianThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumthunderbirdDebianIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumthunderbirdDebianOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumthunderbirdDebianAddress bar spoofing via bidirectional characters6.5 MediumthunderbirdDebianMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalthunderbirdDebianDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighthunderbirdDebianA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumthunderbirdDebianDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighthunderbirdDebianIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdDebianNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumthunderbirdDebianElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighthunderbirdDebianMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalthunderbirdDebianDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumthunderbirdDebianA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumthunderbirdDebianDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighthunderbirdDebianMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighthunderbirdDebianMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighthunderbirdDebianBrowsing Context potentially not cleared when closing Private Window7.5 HighthunderbirdDebianXLL file extensions were downloadable without warnings4.3 MediumthunderbirdDebianPush notifications saved to disk unencrypted6.5 MediumthunderbirdDebianError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumthunderbirdDebianMemory corruption in JIT UpdateRegExpStatics6.5 MediumthunderbirdDebianMemory corruption in IPC FilePickerShownCallback6.5 MediumthunderbirdDebianMemory corruption in IPC ColorPickerShownCallback6.5 MediumthunderbirdDebianMemory corruption in IPC CanvasTranslator6.5 MediumthunderbirdDebianMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalthunderbirdDebianMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalthunderbirdDebianWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighthunderbirdDebianFull screen notification obscured by external program6.5 MediumthunderbirdDebianFull screen notification obscured by file open dialog7.5 HighthunderbirdDebianIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighthunderbirdDebianRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumthunderbirdDebianAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighthunderbirdDebianA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdDebianIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumthunderbirdDebianOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumthunderbirdDebianFile Extension Spoofing using the Text Direction Override Character7.5 HighthunderbirdDebianMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighthunderbirdDebianWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighthunderbirdDebianA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumthunderbirdDebianCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdDebianAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighthunderbirdDebianMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdDebianThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdDebianMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 High- Show moreLoading…