thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaUnsanitized address book fields5.4 Mediumthunderbird-l10nMageiaAddress of e-mail sender can be spoofed by malicious email6.5 Mediumthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalthunderbird-l10nMageiaCertificate length was not properly checked8.8 Highthunderbird-l10nMageiaPotential opening of private browsing tabs in normal browsing windows6.5 Mediumthunderbird-l10nMageiaUse-after-free during concurrent delazification7.5 Highthunderbird-l10nMageiaA bug in WebAssembly code generation could result in a crash8.8 Highthunderbird-l10nMageiaUse-after-free in Custom Highlight8.8 Highthunderbird-l10nMageiaUse-after-free in XSLT9.8 Criticalthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumthunderbird-l10nMageiaMemory corruption when using JavaScript Text Segmentation7.7 Highthunderbird-l10nMageiaCompartment mismatch when parsing JavaScript JSON module4.0 Mediumthunderbird-l10nMageiaAlt-Svc ALPN validation failure when redirected4.0 Mediumthunderbird-l10nMageiaUse-after-free when breaking lines in text5.3 Mediumthunderbird-l10nMageiaWebChannel APIs susceptible to confused deputy attack5.4 Mediumthunderbird-l10nMageiaIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 Highthunderbird-l10nMageiaMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highthunderbird-l10nMageiaA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 Criticalthunderbird-l10nMageiaWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highthunderbird-l10nMageiaThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumthunderbird-l10nMageiaA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumthunderbird-l10nMageiaEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumthunderbird-l10nMageiaAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumthunderbird-l10nMageiaUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 Mediumthunderbird-l10nMageiamatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3 Mediumthunderbird-l10nMageiaMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highthunderbird-l10nMageiaBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highthunderbird-l10nMageiaA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumthunderbird-l10nMageiaRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumthunderbird-l10nMageiaVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumthunderbird-l10nMageiaTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumthunderbird-l10nMageiaIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumthunderbird-l10nMageiaThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumthunderbird-l10nMageiaAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highthunderbird-l10nMageiaA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highthunderbird-l10nMageiaAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalthunderbird-l10nMageiaMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalthunderbird-l10nMageiaIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediumthunderbird-l10nMageiaA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalthunderbird-l10nMageiaThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalthunderbird-l10nMageiaFirefox normally asks for confirmation before asking the operating system to find an application...7.5 Highthunderbird-l10nMageiaInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highthunderbird-l10nMageiaA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalthunderbird-l10nMageiaCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 Mediumthunderbird-l10nMageiaThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Mediumthunderbird-l10nMageiaIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 Highthunderbird-l10nMageiaUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 Highthunderbird-l10nMageiaANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Medium- Show moreLoading…