thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumthunderbirdMageiaUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 MediumthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighthunderbirdMageiaBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumthunderbirdMageiaInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighthunderbirdMageiaDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumthunderbirdMageiaWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumthunderbirdMageiaIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighthunderbirdMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumthunderbirdMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighthunderbirdMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighthunderbirdMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumthunderbirdMageiaA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighthunderbirdMageiaWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumthunderbirdMageiaIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighthunderbirdMageiaMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighthunderbirdMageiaWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumthunderbirdMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighthunderbirdMageiaBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumthunderbirdMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalthunderbirdMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumthunderbirdMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighthunderbirdMageiaMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalthunderbirdMageiaOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighthunderbirdMageiaWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighthunderbirdMageiaUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighthunderbirdMageiaUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalthunderbirdMageiaThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumthunderbirdMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighthunderbirdMageiaWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighthunderbirdMageiaBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighthunderbirdMageiaWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighthunderbirdMageiausrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumthunderbirdMageiaWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 MediumthunderbirdMageiaIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumthunderbirdMageiaWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumthunderbirdMageiaWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighthunderbirdMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumthunderbirdMageiaIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighthunderbirdMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdMageiaDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighthunderbirdMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdMageiaWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighthunderbirdMageiaInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Medium- Show moreLoading…