thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageialibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighthunderbirdMageiaMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdMageiaUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdMageiaSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdMageiaSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdMageiaMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdMageiaMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdMageiaIncorrect JavaScript state machine for generators6.5 MediumthunderbirdMageiaXSLT documents could bypass CSP8.1 HighthunderbirdMageiaIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdMageiajavascript: URLs executed on object and embed tags8.1 HighthunderbirdMageiaLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdMageiaJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdMageiaContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdMageiaIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdMageiaThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdMageiaUse-after-free in FontFaceSet9.8 CriticalthunderbirdMageiaUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdMageiaMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdMageiaMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdMageiaClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdMageiaScript element events leaked cross-origin resource status4.3 MediumthunderbirdMageiaPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdMageiaError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdMageiaA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 HighthunderbirdMageiaOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdMageiaOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdMageiaTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdMageiaJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdMageiaA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighthunderbirdMageiaSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdMageiaMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdMageiaMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdMageiaUnsafe attribute access during XPath parsing4.8 MediumthunderbirdMageiaProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdMageiaMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdMageiaURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdMageiaUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdMageiaAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighthunderbirdMageiaClickjacking the registerProtocolHandler info-bar4.3 MediumthunderbirdMageiaUnexpected GC during RegExp bailout processing6.5 MediumthunderbirdMageiaJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighthunderbirdMageiaInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighthunderbirdMageiaUse-after-free in WebTransportChild7.5 HighthunderbirdMageiaUnsanitized address book fields5.4 MediumthunderbirdMageiaAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Critical- Show moreLoading…