thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 Highthunderbird-l10nMageiaFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 Mediumthunderbird-l10nMageiaEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 Highthunderbird-l10nMageiaIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 Highthunderbird-l10nMageiaA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 Highthunderbird-l10nMageiaInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Criticalthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 Highthunderbird-l10nMageiaMemory corruption in thread creation7.4 Highthunderbird-l10nMageiaRace condition in permission assignment4.7 Mediumthunderbird-l10nMageiaMemory corruption in WebGL API6.3 Mediumthunderbird-l10nMageiaMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 Highthunderbird-l10nMageiaBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 Highthunderbird-l10nMageiaOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Mediumthunderbird-l10nMageiaBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Mediumthunderbird-l10nMageiaBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Mediumthunderbird-l10nMageiaIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 Highthunderbird-l10nMageiaWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 Highthunderbird-l10nMageiaWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 Mediumthunderbird-l10nMageiaA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Mediumthunderbird-l10nMageiaIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 Mediumthunderbird-l10nMageiaPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 Highthunderbird-l10nMageiaMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 Highthunderbird-l10nMageiaThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 Lowthunderbird-l10nMageiaIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Mediumthunderbird-l10nMageiaOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Mediumthunderbird-l10nMageiaThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 Highthunderbird-l10nMageiaIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 Highthunderbird-l10nMageiaGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 Highthunderbird-l10nMageiaTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 Lowthunderbird-l10nMageiaMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 Highthunderbird-l10nMageiaIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 Highthunderbird-l10nMageiaA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Mediumthunderbird-l10nMageiaUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Mediumthunderbird-l10nMageiaThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Mediumthunderbird-l10nMageia`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 Highthunderbird-l10nMageiaReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 Highthunderbird-l10nMageiaThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 Highthunderbird-l10nMageiaIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 Highthunderbird-l10nMageiaSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Mediumthunderbird-l10nMageiaA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Mediumthunderbird-l10nMageiaIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Mediumthunderbird-l10nMageiaA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Mediumthunderbird-l10nMageiaThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Mediumthunderbird-l10nMageiaWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 Highthunderbird-l10nMageiaAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 Highthunderbird-l10nMageiaIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Medium- Show moreLoading…