thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighthunderbirdMageiaA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighthunderbirdMageiaInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalthunderbirdMageiaMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighthunderbirdMageiaMemory corruption in thread creation7.4 HighthunderbirdMageiaRace condition in permission assignment4.7 MediumthunderbirdMageiaMemory corruption in WebGL API6.3 MediumthunderbirdMageiaMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighthunderbirdMageiaMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighthunderbirdMageiaBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighthunderbirdMageiaOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumthunderbirdMageiaBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumthunderbirdMageiaBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumthunderbirdMageiaIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighthunderbirdMageiaMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighthunderbirdMageiaWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighthunderbirdMageiaWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumthunderbirdMageiaA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumthunderbirdMageiaIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumthunderbirdMageiaPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighthunderbirdMageiaMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighthunderbirdMageiaThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowthunderbirdMageiaIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 MediumthunderbirdMageiaOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 MediumthunderbirdMageiaThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 HighthunderbirdMageiaIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 HighthunderbirdMageiaGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 HighthunderbirdMageiaTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LowthunderbirdMageiaMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighthunderbirdMageiaIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighthunderbirdMageiaA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumthunderbirdMageiaUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumthunderbirdMageiaThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 MediumthunderbirdMageia`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighthunderbirdMageiaReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighthunderbirdMageiaThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 HighthunderbirdMageiaMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighthunderbirdMageiaIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighthunderbirdMageiaSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumthunderbirdMageiaA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumthunderbirdMageiaIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumthunderbirdMageiaA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumthunderbirdMageiaThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumthunderbirdMageiaWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighthunderbirdMageiaAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighthunderbirdMageiaMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighthunderbirdMageiaIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumthunderbirdMageiaA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighthunderbirdMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdMageiaA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Medium- Show moreLoading…