thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighthunderbirdMageiaConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdMageiaIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalthunderbirdMageiaWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 MediumthunderbirdMageiaThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalthunderbirdMageiaThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdMageiaMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdMageiaIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdMageiaUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdMageiaDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdMageiaUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdMageiaWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdMageiaFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdMageiaBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdMageiaAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdMageiaUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdMageiaA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdMageiaMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdMageiaDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdMageiaBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdMageiaThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdMageiaThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdMageiaWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdMageiaThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdMageiaThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdMageiaDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighthunderbirdMageiaThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdMageiaDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdMageiaFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdMageiaA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdMageiaA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdMageiaInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdMageiaUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdMageiaData race in crossbeam-deque9.8 CriticalthunderbirdMageiaIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdMageiaMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdMageiaA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdMageiaOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdMageiaA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighthunderbirdMageiaMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdMageiaIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdMageiaOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumthunderbirdMageiaSignatures are written to disk before and read during verification, which might be subject to a...2.5 LowthunderbirdMageiaPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighthunderbirdMageiaThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumthunderbirdMageiaWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 High- Show moreLoading…