thunderbird vulnerabilities (Debian)
1,432 vulnerabilities.
thunderbirdDebianUse-after-free in the WebRTC: Audio/Video component8.8 HighthunderbirdDebianSame-origin policy bypass in the DOM: Workers component8.1 HighthunderbirdDebianMitigation bypass in the DOM: Security component8.1 HighthunderbirdDebianSame-origin policy bypass in the DOM: Notifications component8.1 HighthunderbirdDebianIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 HighthunderbirdDebianSpoofing issue in Firefox3.4 LowthunderbirdDebianUse-after-free in the Audio/Video component8.8 HighthunderbirdDebianMitigation bypass in the DOM: Core & HTML component6.1 MediumthunderbirdDebianRace condition in the Graphics component7.5 HighthunderbirdDebianMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdDebianMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdDebianAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumthunderbirdDebianSome non-writable Object properties could be modified6.5 MediumthunderbirdDebianCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdDebianOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdDebianUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdDebianMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdDebianInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdDebianInteger overflow in the SVG component8.8 HighthunderbirdDebianIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdDebianSame-origin policy bypass in the Layout component6.5 MediumthunderbirdDebianSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdDebianSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdDebianlibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighthunderbirdDebianMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdDebianUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdDebianSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdDebianSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdDebianMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdDebianMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdDebianIncorrect JavaScript state machine for generators6.5 MediumthunderbirdDebianXSLT documents could bypass CSP8.1 HighthunderbirdDebianIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdDebianPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdDebianjavascript: URLs executed on object and embed tags8.1 HighthunderbirdDebianLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdDebianJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdDebianContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdDebianIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdDebianThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdDebianUse-after-free in FontFaceSet9.8 CriticalthunderbirdDebianUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdDebianUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumthunderbirdDebianMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdDebianMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdDebianClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdDebianScript element events leaked cross-origin resource status4.3 MediumthunderbirdDebianPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdDebianError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdDebianOut-of-bounds access when optimizing linear sums8.8 High- Show moreLoading…