thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighthunderbirdMageiaThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumthunderbirdMageiaWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighthunderbirdMageiaA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighthunderbirdMageiaAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 MediumthunderbirdMageiaThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumthunderbirdMageiaIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 MediumthunderbirdMageiaAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 CriticalthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighthunderbirdMageiaA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumthunderbirdMageiaUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumthunderbirdMageiaA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighthunderbirdMageiaWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumthunderbirdMageiaAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumthunderbirdMageiaIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighthunderbirdMageiaFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighthunderbirdMageiaPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighthunderbirdMageiaUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighthunderbirdMageiaIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumthunderbirdMageiaUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighthunderbirdMageiaDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighthunderbirdMageiaWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumthunderbirdMageiaUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumthunderbirdMageiaWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumthunderbirdMageiaWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighthunderbirdMageiaCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighthunderbirdMageiaCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighthunderbirdMageiaUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumthunderbirdMageiaWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighthunderbirdMageiaSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumthunderbirdMageiaWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumthunderbirdMageiaIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighthunderbirdMageiaDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighthunderbirdMageiaFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumthunderbirdMageiaIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumthunderbirdMageiaIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumthunderbirdMageiaA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumthunderbirdMageiaSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumthunderbirdMageiaIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalthunderbirdMageiaUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighthunderbirdMageiaWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighthunderbirdMageiaBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumthunderbirdMageiaFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighthunderbirdMageiaWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 High- Show moreLoading…