thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighthunderbirdMageiaRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumthunderbirdMageiaAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighthunderbirdMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdMageiaIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumthunderbirdMageiaOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumthunderbirdMageiaFile Extension Spoofing using the Text Direction Override Character7.5 HighthunderbirdMageiaUse-after-free in workers8.8 HighthunderbirdMageiaMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdMageiaThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdMageiaMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighthunderbirdMageiaWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdMageiaAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdMageiaA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdMageiaA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdMageiaAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdMageiaIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumthunderbirdMageiaRibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumthunderbirdMageiaOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdMageiaMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdMageiaA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdMageiaFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdMageiaWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdMageiaAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdMageiaFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdMageiaA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdMageiaUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdMageiaPrototype pollution in matrix-js-sdk8.2 HighthunderbirdMageiaMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdMageiaDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdMageiaWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdMageiaWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdMageiaSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdMageiaIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdMageiaMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdMageiaWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdMageiaModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdMageiaAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdMageiaCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdMageiaWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdMageiaA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdMageiaPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighthunderbirdMageiaThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdMageiaAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdMageiaCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdMageiaMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdMageiaCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdMageiaContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdMageiaURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdMageiaArbitrary file read from GTK drag and drop on Linux6.5 Medium- Show moreLoading…