thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Mediumthunderbird-debugsourceRed HatWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 Highthunderbird-debugsourceRed HatIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 Highthunderbird-debugsourceRed HatThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Mediumthunderbird-debugsourceRed HatWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 Highthunderbird-debugsourceRed HatA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 Highthunderbird-debugsourceRed HatAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 Mediumthunderbird-debugsourceRed HatThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 Mediumthunderbird-debugsourceRed HatIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 Mediumthunderbird-debugsourceRed HatThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 Highthunderbird-debugsourceRed HatAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 Criticalthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 Highthunderbird-debugsourceRed HatA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Mediumthunderbird-debugsourceRed HatUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Mediumthunderbird-debugsourceRed HatA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 Highthunderbird-debugsourceRed HatWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Mediumthunderbird-debugsourceRed HatAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Mediumthunderbird-debugsourceRed HatIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Mediumthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 Highthunderbird-debugsourceRed HatFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 Highthunderbird-debugsourceRed HatPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 Highthunderbird-debugsourceRed HatUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highthunderbird-debugsourceRed HatIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediumthunderbird-debugsourceRed HatUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highthunderbird-debugsourceRed HatDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 Highthunderbird-debugsourceRed HatWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediumthunderbird-debugsourceRed HatUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediumthunderbird-debugsourceRed HatWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediumthunderbird-debugsourceRed HatWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highthunderbird-debugsourceRed HatCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highthunderbird-debugsourceRed HatCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highthunderbird-debugsourceRed HatUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Mediumthunderbird-debugsourceRed HatWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highthunderbird-debugsourceRed HatSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediumthunderbird-debugsourceRed HatWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediumthunderbird-debugsourceRed HatIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highthunderbird-debugsourceRed HatDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highthunderbird-debugsourceRed HatFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediumthunderbird-debugsourceRed HatIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediumthunderbird-debugsourceRed HatIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediumthunderbird-debugsourceRed HatA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediumthunderbird-debugsourceRed HatSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediumthunderbird-debugsourceRed HatIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Criticalthunderbird-debugsourceRed HatUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highthunderbird-debugsourceRed HatWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highthunderbird-debugsourceRed HatBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Medium- Show moreLoading…