thunderbird-debuginfo vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbird-debuginfoRed HatDuring garbage collection extra operations were performed on a object that should not be. This...7.5 Highthunderbird-debuginfoRed HatA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 Mediumthunderbird-debuginfoRed HatDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 Highthunderbird-debuginfoRed HatIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumthunderbird-debuginfoRed HatNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Mediumthunderbird-debuginfoRed HatVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 Highthunderbird-debuginfoRed HatElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 Highthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 Criticalthunderbird-debuginfoRed HatDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 Mediumthunderbird-debuginfoRed HatA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 Mediumthunderbird-debuginfoRed HatWith a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...10.0 Criticalthunderbird-debuginfoRed HatDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 Highthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 Highthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 Highthunderbird-debuginfoRed HatBrowsing Context potentially not cleared when closing Private Window7.5 Highthunderbird-debuginfoRed HatXLL file extensions were downloadable without warnings4.3 Mediumthunderbird-debuginfoRed HatPush notifications saved to disk unencrypted6.5 Mediumthunderbird-debuginfoRed HatError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Mediumthunderbird-debuginfoRed HatMemory corruption in JIT UpdateRegExpStatics6.5 Mediumthunderbird-debuginfoRed HatMemory corruption in IPC FilePickerShownCallback6.5 Mediumthunderbird-debuginfoRed HatMemory corruption in IPC ColorPickerShownCallback6.5 Mediumthunderbird-debuginfoRed HatMemory corruption in IPC CanvasTranslator6.5 Mediumthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Criticalthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 Criticalthunderbird-debuginfoRed HatWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 Highthunderbird-debuginfoRed HatFull screen notification obscured by external program6.5 Mediumthunderbird-debuginfoRed HatFull screen notification obscured by file open dialog7.5 Highthunderbird-debuginfoRed HatIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 Highthunderbird-debuginfoRed HatRace conditions in reference counting code were found through code inspection. These could have...5.9 Mediumthunderbird-debuginfoRed HatAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 Highthunderbird-debuginfoRed HatA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highthunderbird-debuginfoRed HatIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Mediumthunderbird-debuginfoRed HatOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Mediumthunderbird-debuginfoRed HatFile Extension Spoofing using the Text Direction Override Character7.5 Highthunderbird-debuginfoRed HatUse-after-free in workers8.8 Highthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 Highthunderbird-debuginfoRed HatWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 Highthunderbird-debuginfoRed HatA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Mediumthunderbird-debuginfoRed HatCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highthunderbird-debuginfoRed HatAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 Highthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Criticalthunderbird-debuginfoRed HatThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowthunderbird-debuginfoRed HatMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highthunderbird-debuginfoRed HatWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highthunderbird-debuginfoRed HatAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumthunderbird-debuginfoRed HatA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumthunderbird-debuginfoRed HatA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highthunderbird-debuginfoRed HatAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumthunderbird-debuginfoRed HatIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumthunderbird-debuginfoRed HatRibose RNP before 0.16.3 may hang when the input is malformed.5.3 Medium- Show moreLoading…