thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumthunderbirdMageiaA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalthunderbirdMageiaA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalthunderbirdMageiaWhen displaying the sender of an email, and the sender name contained the Braille Pattern Blank...6.5 MediumthunderbirdMageiaIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighthunderbirdMageiaAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighthunderbirdMageiaThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 MediumthunderbirdMageiaWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 MediumthunderbirdMageiaMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalthunderbirdMageiaFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumthunderbirdMageiaWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdMageiaRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdMageiaAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdMageiaDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighthunderbirdMageiaWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdMageiaMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdMageiaDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdMageiaWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdMageiaBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdMageiaIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdMageiaAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdMageia<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdMageiaWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighthunderbirdMageiaPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdMageiaIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdMageiaWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdMageiaAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdMageiaRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdMageiaAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalthunderbirdMageiaRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighthunderbirdMageiaIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalthunderbirdMageiaIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdMageiaxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalthunderbirdMageiaxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalthunderbirdMageiaMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdMageiaWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdMageiaWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdMageiaWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdMageiaIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdMageiaIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdMageiaIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdMageiaMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdMageiaMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdMageiaAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdMageiaSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdMageiaWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdMageiaWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdMageiaWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdMageiaCertain network request objects were freed too early when releasing a network request handle....8.8 HighthunderbirdMageiaMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Medium- Show moreLoading…