thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdDebianTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdDebianJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdDebianSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdDebianMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdDebianMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdDebianUnsafe attribute access during XPath parsing4.8 MediumthunderbirdDebianProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdDebianUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdDebianLeak of hashed Window credentials via crafted attachment URL6.3 MediumthunderbirdDebianInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdDebianURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdDebianUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdDebianCrafted email message incorrectly shown as being encrypted7.0 HighthunderbirdDebianDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdDebianAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighthunderbirdDebianClickjacking the registerProtocolHandler info-bar4.3 MediumthunderbirdDebianUnexpected GC during RegExp bailout processing6.5 MediumthunderbirdDebianJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighthunderbirdDebianInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighthunderbirdDebianUse-after-free in WebTransportChild7.5 HighthunderbirdDebianUnsanitized address book fields5.4 MediumthunderbirdDebianAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalthunderbirdDebianMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdDebianCertificate length was not properly checked8.8 HighthunderbirdDebianPotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdDebianUse-after-free during concurrent delazification7.5 HighthunderbirdDebianA bug in WebAssembly code generation could result in a crash8.8 HighthunderbirdDebianUse-after-free in Custom Highlight8.8 HighthunderbirdDebianUse-after-free in XSLT9.8 CriticalthunderbirdDebianMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumthunderbirdDebianMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdDebianMemory corruption when using JavaScript Text Segmentation7.7 HighthunderbirdDebianCompartment mismatch when parsing JavaScript JSON module4.0 MediumthunderbirdDebianAlt-Svc ALPN validation failure when redirected4.0 MediumthunderbirdDebianUse-after-free when breaking lines in text5.3 MediumthunderbirdDebianWebChannel APIs susceptible to confused deputy attack5.4 MediumthunderbirdDebianIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighthunderbirdDebianMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighthunderbirdDebianA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalthunderbirdDebianWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighthunderbirdDebianThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumthunderbirdDebianA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumthunderbirdDebianEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumthunderbirdDebianAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumthunderbirdDebianUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 Medium- Show moreLoading…