thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 Highthunderbird-debugsourceRed HataddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalthunderbird-debugsourceRed Hatbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalthunderbird-debugsourceRed HatdefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalthunderbird-debugsourceRed HatIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 Criticalthunderbird-debugsourceRed HatThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 Criticalthunderbird-debugsourceRed HatIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 Mediumthunderbird-debugsourceRed HatUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Mediumthunderbird-debugsourceRed HatDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 Mediumthunderbird-debugsourceRed HatUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Mediumthunderbird-debugsourceRed HatWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 Mediumthunderbird-debugsourceRed HatFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 Highthunderbird-debugsourceRed HatBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Mediumthunderbird-debugsourceRed HatAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 Highthunderbird-debugsourceRed HatUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Mediumthunderbird-debugsourceRed HatNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...9.8 Criticalthunderbird-debugsourceRed HatThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 Criticalthunderbird-debugsourceRed HatA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 Highthunderbird-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 Highthunderbird-debugsourceRed HatDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Mediumthunderbird-debugsourceRed HatBy displaying a form validity message in the correct location at the same time as a permission...4.3 Mediumthunderbird-debugsourceRed HatThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Mediumthunderbird-debugsourceRed HatThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Mediumthunderbird-debugsourceRed HatWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 Highthunderbird-debugsourceRed HatThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Criticalthunderbird-debugsourceRed HatThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 Mediumthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highthunderbird-debugsourceRed HatDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 Highthunderbird-debugsourceRed HatThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highthunderbird-debugsourceRed HatDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 Highthunderbird-debugsourceRed HatFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 Highthunderbird-debugsourceRed HatA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 Highthunderbird-debugsourceRed HatA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 Highthunderbird-debugsourceRed HatInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 Highthunderbird-debugsourceRed HatUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 Highthunderbird-debugsourceRed HatData race in crossbeam-deque9.8 Criticalthunderbird-debugsourceRed HatIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 Mediumthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 Highthunderbird-debugsourceRed HatA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 Highthunderbird-debugsourceRed HatOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 Highthunderbird-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 Highthunderbird-debugsourceRed HatIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 Mediumthunderbird-debugsourceRed HatOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 Mediumthunderbird-debugsourceRed HatWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 Highthunderbird-debugsourceRed HatSignatures are written to disk before and read during verification, which might be subject to a...2.5 Lowthunderbird-debugsourceRed HatPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 High- Show moreLoading…