thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaSame-origin policy bypass in the Layout component6.5 Mediumthunderbird-l10nMageiaSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highthunderbird-l10nMageiaSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highthunderbird-l10nMageialibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 Highthunderbird-l10nMageiaMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highthunderbird-l10nMageiaUninitialized memory in the JavaScript Engine component6.5 Mediumthunderbird-l10nMageiaSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highthunderbird-l10nMageiaSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalthunderbird-l10nMageiaMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highthunderbird-l10nMageiaMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highthunderbird-l10nMageiaIncorrect JavaScript state machine for generators6.5 Mediumthunderbird-l10nMageiaXSLT documents could bypass CSP8.1 Highthunderbird-l10nMageiaIncorrect URL stripping in CSP reports9.8 Criticalthunderbird-l10nMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 Highthunderbird-l10nMageiajavascript: URLs executed on object and embed tags8.1 Highthunderbird-l10nMageiaLarge branch table could lead to truncated instruction9.8 Criticalthunderbird-l10nMageiaJavaScript engine only wrote partial return value to stack6.5 Mediumthunderbird-l10nMageiaContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumthunderbird-l10nMageiaIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumthunderbird-l10nMageiaThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumthunderbird-l10nMageiaUse-after-free in FontFaceSet9.8 Criticalthunderbird-l10nMageiaUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 Mediumthunderbird-l10nMageiaMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highthunderbird-l10nMageiaClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumthunderbird-l10nMageiaScript element events leaked cross-origin resource status4.3 Mediumthunderbird-l10nMageiaPotential local code execution in “Copy as cURL” command4.8 Mediumthunderbird-l10nMageiaError handling for script execution was incorrectly isolated from web content4.3 Mediumthunderbird-l10nMageiaA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 Highthunderbird-l10nMageiaOut-of-bounds access when optimizing linear sums8.8 Highthunderbird-l10nMageiaOut-of-bounds access when resolving Promise objects9.8 Criticalthunderbird-l10nMageiaTracking Links in Attachments Bypassed Remote Content Blocking6.5 Mediumthunderbird-l10nMageiaJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 Highthunderbird-l10nMageiaA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 Highthunderbird-l10nMageiaSender Spoofing via Malformed From Header in Thunderbird7.5 Highthunderbird-l10nMageiaMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 Highthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highthunderbird-l10nMageiaUnsafe attribute access during XPath parsing4.8 Mediumthunderbird-l10nMageiaProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highthunderbird-l10nMageiaURL Bar Spoofing via non-BMP Unicode characters7.3 Highthunderbird-l10nMageiaUse-after-free triggered by XSLTProcessor6.5 Mediumthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumthunderbird-l10nMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highthunderbird-l10nMageiaAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highthunderbird-l10nMageiaClickjacking the registerProtocolHandler info-bar4.3 Mediumthunderbird-l10nMageiaUnexpected GC during RegExp bailout processing6.5 Mediumthunderbird-l10nMageiaJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highthunderbird-l10nMageiaInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highthunderbird-l10nMageiaUse-after-free in WebTransportChild7.5 High- Show moreLoading…