thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 Criticalthunderbird-debugsourceRed HatA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 Criticalthunderbird-debugsourceRed HatWhen displaying the sender of an email, and the sender name contained the Braille Pattern Blank...6.5 Mediumthunderbird-debugsourceRed HatIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 Highthunderbird-debugsourceRed HatAn attacker could have sent a message to the parent process where the contents were used to...8.8 Highthunderbird-debugsourceRed HatThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 Mediumthunderbird-debugsourceRed HatWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 Mediumthunderbird-debugsourceRed HatMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 Criticalthunderbird-debugsourceRed HatFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 Mediumthunderbird-debugsourceRed HatWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 Mediumthunderbird-debugsourceRed HatRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 Mediumthunderbird-debugsourceRed HatAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 Mediumthunderbird-debugsourceRed HatDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 Highthunderbird-debugsourceRed HatWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 Mediumthunderbird-debugsourceRed HatMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 Highthunderbird-debugsourceRed HatDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 Mediumthunderbird-debugsourceRed HatWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 Mediumthunderbird-debugsourceRed HatBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 Mediumthunderbird-debugsourceRed HatIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 Highthunderbird-debugsourceRed HatAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 Mediumthunderbird-debugsourceRed Hat<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 Mediumthunderbird-debugsourceRed HatWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 Highthunderbird-debugsourceRed HatPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 Mediumthunderbird-debugsourceRed HatIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 Criticalthunderbird-debugsourceRed HatWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 Mediumthunderbird-debugsourceRed HatAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 Highthunderbird-debugsourceRed HatRegular expression denial of service in Rust's regex crate7.5 Highthunderbird-debugsourceRed HatAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 Criticalthunderbird-debugsourceRed HatRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 Highthunderbird-debugsourceRed HatIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 Criticalthunderbird-debugsourceRed HatIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 Highthunderbird-debugsourceRed Hatxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Criticalthunderbird-debugsourceRed Hatxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 Criticalthunderbird-debugsourceRed HatMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highthunderbird-debugsourceRed HatWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 Highthunderbird-debugsourceRed HatWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 Highthunderbird-debugsourceRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 Mediumthunderbird-debugsourceRed HatIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 Criticalthunderbird-debugsourceRed HatIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 Highthunderbird-debugsourceRed HatIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 Highthunderbird-debugsourceRed HatMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 Mediumthunderbird-debugsourceRed HatAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 Mediumthunderbird-debugsourceRed HatSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 Mediumthunderbird-debugsourceRed HatWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 Mediumthunderbird-debugsourceRed HatWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 Mediumthunderbird-debugsourceRed HatWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 Highthunderbird-debugsourceRed HatCertain network request objects were freed too early when releasing a network request handle....8.8 Highthunderbird-debugsourceRed HatMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Mediumthunderbird-debugsourceRed HatApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 High- Show moreLoading…