thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighthunderbirdDebianWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighthunderbirdDebianWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumthunderbirdDebianA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumthunderbirdDebianIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumthunderbirdDebianPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighthunderbirdDebianMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighthunderbirdDebianThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowthunderbirdDebianIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 MediumthunderbirdDebianOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 MediumthunderbirdDebianThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 HighthunderbirdDebianIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 HighthunderbirdDebianGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 HighthunderbirdDebianTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LowthunderbirdDebianMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighthunderbirdDebianIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighthunderbirdDebianA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumthunderbirdDebianUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumthunderbirdDebianThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 MediumthunderbirdDebian`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighthunderbirdDebianReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighthunderbirdDebianThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 HighthunderbirdDebianMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighthunderbirdDebianIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighthunderbirdDebianSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumthunderbirdDebianA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumthunderbirdDebianIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumthunderbirdDebianA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumthunderbirdDebianThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumthunderbirdDebianWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighthunderbirdDebianAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighthunderbirdDebianMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighthunderbirdDebianIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumthunderbirdDebianA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighthunderbirdDebianA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdDebianA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumthunderbirdDebianWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumthunderbirdDebianA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumthunderbirdDebianIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdDebianAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumthunderbirdDebianMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...8.8 HighthunderbirdDebianMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighthunderbirdDebianA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighthunderbirdDebianThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighthunderbirdDebianThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumthunderbirdDebianA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighthunderbirdDebianFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighthunderbirdDebianWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumthunderbirdDebianThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighthunderbirdDebianThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 Medium- Show moreLoading…