thunderbird-debuginfo vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbird-debuginfoRed HatFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumthunderbird-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highthunderbird-debuginfoRed HatWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 Highthunderbird-debuginfoRed HatBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumthunderbird-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highthunderbird-debuginfoRed HatBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumthunderbird-debuginfoRed HatInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumthunderbird-debuginfoRed HatIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...5.9 Mediumthunderbird-debuginfoRed HatWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumthunderbird-debuginfoRed HatWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highthunderbird-debuginfoRed HatWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highthunderbird-debuginfoRed HatManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumthunderbird-debuginfoRed HatDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highthunderbird-debuginfoRed HatIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 Highthunderbird-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highthunderbird-debuginfoRed HatMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highthunderbird-debuginfoRed HatWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumthunderbird-debuginfoRed HatUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highthunderbird-debuginfoRed HatBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 Mediumthunderbird-debuginfoRed HatA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalthunderbird-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalthunderbird-debuginfoRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumthunderbird-debuginfoRed HatA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highthunderbird-debuginfoRed HatMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalthunderbird-debuginfoRed HatOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highthunderbird-debuginfoRed HatWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highthunderbird-debuginfoRed HatUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highthunderbird-debuginfoRed HatUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highthunderbird-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalthunderbird-debuginfoRed HatThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumthunderbird-debuginfoRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highthunderbird-debuginfoRed HatWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highthunderbird-debuginfoRed HatBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highthunderbird-debuginfoRed HatWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highthunderbird-debuginfoRed Hatusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumthunderbird-debuginfoRed HatWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 Mediumthunderbird-debuginfoRed HatIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 Mediumthunderbird-debuginfoRed HatWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 Mediumthunderbird-debuginfoRed HatWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 Mediumthunderbird-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highthunderbird-debuginfoRed HatIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumthunderbird-debuginfoRed HatIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highthunderbird-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highthunderbird-debuginfoRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumthunderbird-debuginfoRed HatDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 Highthunderbird-debuginfoRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumthunderbird-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highthunderbird-debuginfoRed HatUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highthunderbird-debuginfoRed HatUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highthunderbird-debuginfoRed HatWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 High- Show moreLoading…