thunderbird-debuginfo vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highthunderbird-debuginfoRed HatUnsafe attribute access during XPath parsing4.8 Mediumthunderbird-debuginfoRed HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalthunderbird-debuginfoRed HatPrivilege escalation in Thunderbird Updater8.8 Highthunderbird-debuginfoRed HatUser Interface (UI) Misrepresentation of attachment URL6.4 Mediumthunderbird-debuginfoRed HatLeak of hashed Window credentials via crafted attachment URL6.3 Mediumthunderbird-debuginfoRed HatInformation Disclosure of /tmp directory listing6.3 Mediumthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highthunderbird-debuginfoRed HatURL Bar Spoofing via non-BMP Unicode characters7.3 Highthunderbird-debuginfoRed HatUse-after-free triggered by XSLTProcessor6.5 Mediumthunderbird-debuginfoRed HatCrafted email message incorrectly shown as being encrypted7.0 Highthunderbird-debuginfoRed HatDownloading of OpenPGP keys from WKD used incorrect padding5.3 Mediumthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highthunderbird-debuginfoRed HatUnsanitized address book fields5.4 Mediumthunderbird-debuginfoRed HatAddress of e-mail sender can be spoofed by malicious email6.5 Mediumthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalthunderbird-debuginfoRed HatCertificate length was not properly checked8.8 Highthunderbird-debuginfoRed HatPotential opening of private browsing tabs in normal browsing windows6.5 Mediumthunderbird-debuginfoRed HatUse-after-free during concurrent delazification7.5 Highthunderbird-debuginfoRed HatA bug in WebAssembly code generation could result in a crash8.8 Highthunderbird-debuginfoRed HatUse-after-free in Custom Highlight8.8 Highthunderbird-debuginfoRed HatUse-after-free in XSLT9.8 Criticalthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumthunderbird-debuginfoRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumthunderbird-debuginfoRed HatMemory corruption when using JavaScript Text Segmentation7.7 Highthunderbird-debuginfoRed HatCompartment mismatch when parsing JavaScript JSON module4.0 Mediumthunderbird-debuginfoRed HatAlt-Svc ALPN validation failure when redirected4.0 Mediumthunderbird-debuginfoRed HatUse-after-free when breaking lines in text5.3 Mediumthunderbird-debuginfoRed HatWebChannel APIs susceptible to confused deputy attack5.4 Mediumthunderbird-debuginfoRed Hatidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 Mediumthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highthunderbird-debuginfoRed HatWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highthunderbird-debuginfoRed HatThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumthunderbird-debuginfoRed HatA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumthunderbird-debuginfoRed HatEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumthunderbird-debuginfoRed HatAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumthunderbird-debuginfoRed HatUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 Mediumthunderbird-debuginfoRed HatMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highthunderbird-debuginfoRed HatBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highthunderbird-debuginfoRed HatA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumthunderbird-debuginfoRed HatRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumthunderbird-debuginfoRed HatVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumthunderbird-debuginfoRed HatTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumthunderbird-debuginfoRed HatIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumthunderbird-debuginfoRed HatThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumthunderbird-debuginfoRed HatAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highthunderbird-debuginfoRed HatA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highthunderbird-debuginfoRed HatAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Critical- Show moreLoading…