thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highthunderbird-debugsourceRed HatMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highthunderbird-debugsourceRed HatFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediumthunderbird-debugsourceRed HatIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediumthunderbird-debugsourceRed HatBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediumthunderbird-debugsourceRed HatA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highthunderbird-debugsourceRed HatAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highthunderbird-debugsourceRed HatWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highthunderbird-debugsourceRed HatEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 Mediumthunderbird-debugsourceRed HatIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highthunderbird-debugsourceRed HatIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highthunderbird-debugsourceRed HatA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highthunderbird-debugsourceRed HatSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediumthunderbird-debugsourceRed HatNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowthunderbird-debugsourceRed HatA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highthunderbird-debugsourceRed HatAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highthunderbird-debugsourceRed HatA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumthunderbird-debugsourceRed HatA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumthunderbird-debugsourceRed HatDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediumthunderbird-debugsourceRed HatA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalthunderbird-debugsourceRed HatPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highthunderbird-debugsourceRed HatWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalthunderbird-debugsourceRed HatInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 Criticalthunderbird-debugsourceRed HatA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highthunderbird-debugsourceRed HatA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 Highthunderbird-debugsourceRed HatA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 Criticalthunderbird-debugsourceRed HatA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Criticalthunderbird-debugsourceRed HatA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Criticalthunderbird-debugsourceRed HatA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Criticalthunderbird-debugsourceRed HatA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Criticalthunderbird-debugsourceRed HatImages from a different domain can be read using a canvas object in some circumstances. This...5.3 Mediumthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 Criticalthunderbird-debugsourceRed HatIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 Mediumthunderbird-debugsourceRed HatThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 Criticalthunderbird-debugsourceRed HatA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 Criticalthunderbird-debugsourceRed HatA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 Criticalthunderbird-debugsourceRed HatIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 Highthunderbird-debugsourceRed HatIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 Highthunderbird-debugsourceRed HatCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 Mediumthunderbird-debugsourceRed HatA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Criticalthunderbird-debugsourceRed HatA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Criticalthunderbird-debugsourceRed HatA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Mediumthunderbird-debugsourceRed HatThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 Criticalthunderbird-debugsourceRed HatThe type inference system allows the compilation of functions that can cause type confusions...9.8 Criticalthunderbird-debugsourceRed HatA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Criticalthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Criticalthunderbird-debugsourceRed HatLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Medium- Show moreLoading…