thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighthunderbirdMageiaUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighthunderbirdMageiaUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighthunderbirdMageiaWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighthunderbirdMageiaThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighthunderbirdMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighthunderbirdMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumthunderbirdMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumthunderbirdMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumthunderbirdMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighthunderbirdMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighthunderbirdMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighthunderbirdMageiaA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 HighthunderbirdMageiaEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumthunderbirdMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighthunderbirdMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighthunderbirdMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighthunderbirdMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumthunderbirdMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowthunderbirdMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighthunderbirdMageiaAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighthunderbirdMageiaA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumthunderbirdMageiaEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighthunderbirdMageiaThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumthunderbirdMageiaA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumthunderbirdMageiaWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumthunderbirdMageiaApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumthunderbirdMageiaA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighthunderbirdMageiaThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumthunderbirdMageiaSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumthunderbirdMageiaWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighthunderbirdMageiaA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumthunderbirdMageiaUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighthunderbirdMageiaDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumthunderbirdMageiaNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalthunderbirdMageiaPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighthunderbirdMageiaWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalthunderbirdMageiaInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalthunderbirdMageiaA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighthunderbirdMageiaA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighthunderbirdMageiaA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalthunderbirdMageiaA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdMageiaA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdMageiaA race condition is present in the crash generation server used to generate data for the crash...8.3 HighthunderbirdMageiaA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Critical- Show moreLoading…