thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdMageiaAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdMageiaA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalthunderbirdMageiaAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighthunderbirdMageiaA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumthunderbirdMageiaMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighthunderbirdMageiaA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighthunderbirdMageiaAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighthunderbirdMageiaIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighthunderbirdMageiaMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdMageiaUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumthunderbirdMageiaIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdMageiaKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdMageiaWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighthunderbirdMageiaCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumthunderbirdMageiaWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumthunderbirdMageiaThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighthunderbirdMageiaThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumthunderbirdMageiaIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalthunderbirdMageiaFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumthunderbirdMageiaThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumthunderbirdMageiaService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumthunderbirdMageiaMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighthunderbirdMageiaMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighthunderbirdMageiaMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighthunderbirdMageiaMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumthunderbirdMageiaMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighthunderbirdMageiaConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumthunderbirdMageiaDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumthunderbirdMageiaBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumthunderbirdMageiaWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumthunderbirdMageialibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighthunderbirdMageiaMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighthunderbirdMageiaA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighthunderbirdMageiaAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumthunderbirdMageiaWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighthunderbirdMageiaWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumthunderbirdMageiaAn OpenPGP digital signature includes information about the date when the signature was created....6.5 MediumthunderbirdMageiaThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighthunderbirdMageiaIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighthunderbirdMageiaA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumthunderbirdMageiaIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumthunderbirdMageiaSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalthunderbirdMageiaAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighthunderbirdMageiaIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighthunderbirdMageiaMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 CriticalthunderbirdMageiaAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumthunderbirdMageiaAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumthunderbirdMageiaA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighthunderbirdMageiaOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 High- Show moreLoading…