thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 Highthunderbird-l10nMageiaFull screen notification obscured by external program6.5 Mediumthunderbird-l10nMageiaFull screen notification obscured by file open dialog7.5 Highthunderbird-l10nMageiaIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 Highthunderbird-l10nMageiaRace conditions in reference counting code were found through code inspection. These could have...5.9 Mediumthunderbird-l10nMageiaAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 Highthunderbird-l10nMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highthunderbird-l10nMageiaIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Mediumthunderbird-l10nMageiaOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Mediumthunderbird-l10nMageiaFile Extension Spoofing using the Text Direction Override Character7.5 Highthunderbird-l10nMageiaUse-after-free in workers8.8 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Criticalthunderbird-l10nMageiaThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowthunderbird-l10nMageiaMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highthunderbird-l10nMageiaWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highthunderbird-l10nMageiaAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumthunderbird-l10nMageiaA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumthunderbird-l10nMageiaA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highthunderbird-l10nMageiaAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumthunderbird-l10nMageiaIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumthunderbird-l10nMageiaRibose RNP before 0.16.3 may hang when the input is malformed.5.3 Mediumthunderbird-l10nMageiaOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 Mediumthunderbird-l10nMageiaMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highthunderbird-l10nMageiaA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumthunderbird-l10nMageiaFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highthunderbird-l10nMageiaWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highthunderbird-l10nMageiaAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highthunderbird-l10nMageiaFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumthunderbird-l10nMageiaA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumthunderbird-l10nMageiaUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Mediumthunderbird-l10nMageiaPrototype pollution in matrix-js-sdk8.2 Highthunderbird-l10nMageiaMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highthunderbird-l10nMageiaDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumthunderbird-l10nMageiaWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highthunderbird-l10nMageiaWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumthunderbird-l10nMageiaSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumthunderbird-l10nMageiaIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 Mediumthunderbird-l10nMageiaMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 Highthunderbird-l10nMageiaWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumthunderbird-l10nMageiaModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 Highthunderbird-l10nMageiaAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 Highthunderbird-l10nMageiaCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highthunderbird-l10nMageiaWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 Highthunderbird-l10nMageiaA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 Mediumthunderbird-l10nMageiaPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 Highthunderbird-l10nMageiaThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 Mediumthunderbird-l10nMageiaAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 Highthunderbird-l10nMageiaCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 Mediumthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 Highthunderbird-l10nMageiaCalls to console.log allowed bypassing Content Security Policy via format directive6.5 Medium- Show moreLoading…