thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumthunderbird-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highthunderbird-l10nMageiaWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 Highthunderbird-l10nMageiaBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumthunderbird-l10nMageiaUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 Mediumthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highthunderbird-l10nMageiaBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumthunderbird-l10nMageiaInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 Highthunderbird-l10nMageiaDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Mediumthunderbird-l10nMageiaWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Mediumthunderbird-l10nMageiaIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 Highthunderbird-l10nMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumthunderbird-l10nMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highthunderbird-l10nMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highthunderbird-l10nMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumthunderbird-l10nMageiaA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 Highthunderbird-l10nMageiaWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 Mediumthunderbird-l10nMageiaIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 Highthunderbird-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highthunderbird-l10nMageiaMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highthunderbird-l10nMageiaWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumthunderbird-l10nMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highthunderbird-l10nMageiaBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 Mediumthunderbird-l10nMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalthunderbird-l10nMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumthunderbird-l10nMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highthunderbird-l10nMageiaMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalthunderbird-l10nMageiaOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highthunderbird-l10nMageiaWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highthunderbird-l10nMageiaUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highthunderbird-l10nMageiaUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highthunderbird-l10nMageiaMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalthunderbird-l10nMageiaThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumthunderbird-l10nMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highthunderbird-l10nMageiaWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highthunderbird-l10nMageiaBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highthunderbird-l10nMageiaWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highthunderbird-l10nMageiausrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumthunderbird-l10nMageiaWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 Mediumthunderbird-l10nMageiaIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 Mediumthunderbird-l10nMageiaWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 Mediumthunderbird-l10nMageiaWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 Mediumthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highthunderbird-l10nMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumthunderbird-l10nMageiaIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highthunderbird-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highthunderbird-l10nMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumthunderbird-l10nMageiaDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 High- Show moreLoading…