thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 Mediumthunderbird-debugsourceRed HatWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 Mediumthunderbird-debugsourceRed HatThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 Highthunderbird-debugsourceRed HatThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 Mediumthunderbird-debugsourceRed HatIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 Criticalthunderbird-debugsourceRed HatFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 Mediumthunderbird-debugsourceRed HatThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 Mediumthunderbird-debugsourceRed HatService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highthunderbird-debugsourceRed HatIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 Mediumthunderbird-debugsourceRed HatCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 Highthunderbird-debugsourceRed HatA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 Highthunderbird-debugsourceRed HatMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 Highthunderbird-debugsourceRed HatMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 Highthunderbird-debugsourceRed HatMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 Highthunderbird-debugsourceRed HatMatrix Javascript SDK improper beacon events can cause availability issues4.3 Mediumthunderbird-debugsourceRed HatInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 Mediumthunderbird-debugsourceRed HatAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 Mediumthunderbird-debugsourceRed HatMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 Highthunderbird-debugsourceRed HatConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 Mediumthunderbird-debugsourceRed HatDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 Mediumthunderbird-debugsourceRed HatBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 Mediumthunderbird-debugsourceRed HatWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 Mediumthunderbird-debugsourceRed Hatlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 Highthunderbird-debugsourceRed HatPrototype pollution in matrix-js-sdk8.2 Highthunderbird-debugsourceRed HatWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 Mediumthunderbird-debugsourceRed HatIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 Highthunderbird-debugsourceRed HatWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 Mediumthunderbird-debugsourceRed HatMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 Highthunderbird-debugsourceRed HatMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highthunderbird-debugsourceRed HatA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 Highthunderbird-debugsourceRed HatA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 Highthunderbird-debugsourceRed HatAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 Highthunderbird-debugsourceRed HatWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 Highthunderbird-debugsourceRed HatWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Mediumthunderbird-debugsourceRed HatAn OpenPGP digital signature includes information about the date when the signature was created....6.5 Mediumthunderbird-debugsourceRed HatThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 Highthunderbird-debugsourceRed HatIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 Highthunderbird-debugsourceRed HatA malicious website that could create a popup could have resized the popup to overlay the address...6.5 Mediumthunderbird-debugsourceRed HatIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 Mediumthunderbird-debugsourceRed HatSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Criticalthunderbird-debugsourceRed HatAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 Highthunderbird-debugsourceRed HatIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 Highthunderbird-debugsourceRed HatMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 Criticalthunderbird-debugsourceRed HatAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 Mediumthunderbird-debugsourceRed HatAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 Mediumthunderbird-debugsourceRed HatA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 Highthunderbird-debugsourceRed HatOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 Highthunderbird-debugsourceRed HatWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 Medium- Show moreLoading…