thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatUse after free in libwebp5.3 Mediumthunderbird-debugsourceRed HatOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highthunderbird-debugsourceRed HatA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumthunderbird-debugsourceRed HatFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highthunderbird-debugsourceRed HatWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highthunderbird-debugsourceRed HatAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highthunderbird-debugsourceRed HatFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumthunderbird-debugsourceRed HatA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumthunderbird-debugsourceRed HatUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Mediumthunderbird-debugsourceRed HatPrototype pollution in matrix-js-sdk8.2 Highthunderbird-debugsourceRed HatMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highthunderbird-debugsourceRed HatDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumthunderbird-debugsourceRed HatWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highthunderbird-debugsourceRed HatWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumthunderbird-debugsourceRed HatSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumthunderbird-debugsourceRed HatA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 Highthunderbird-debugsourceRed HatIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 Highthunderbird-debugsourceRed HatMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highthunderbird-debugsourceRed HatWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumthunderbird-debugsourceRed HatModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 Highthunderbird-debugsourceRed HatAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 Highthunderbird-debugsourceRed HatCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highthunderbird-debugsourceRed HatWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 Highthunderbird-debugsourceRed HatA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 Mediumthunderbird-debugsourceRed HatPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 Highthunderbird-debugsourceRed HatThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 Mediumthunderbird-debugsourceRed HatAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 Highthunderbird-debugsourceRed HatCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 Mediumthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 Highthunderbird-debugsourceRed HatCalls to console.log allowed bypassing Content Security Policy via format directive6.5 Mediumthunderbird-debugsourceRed HatContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 Mediumthunderbird-debugsourceRed HatURL being dragged from cross-origin iframe into same tab triggers navigation6.5 Mediumthunderbird-debugsourceRed HatMalicious command could be hidden in devtools output on Windows6.5 Mediumthunderbird-debugsourceRed HatArbitrary file read from GTK drag and drop on Linux6.5 Mediumthunderbird-debugsourceRed HatBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 Mediumthunderbird-debugsourceRed HatAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 Highthunderbird-debugsourceRed HatA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 Criticalthunderbird-debugsourceRed HatAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 Highthunderbird-debugsourceRed HatA missing check related to tex units could have led to a use-after-free and potentially...6.5 Mediumthunderbird-debugsourceRed HatMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 Highthunderbird-debugsourceRed HatA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 Highthunderbird-debugsourceRed HatAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 Highthunderbird-debugsourceRed HatIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 Highthunderbird-debugsourceRed HatMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 Highthunderbird-debugsourceRed HatUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 Mediumthunderbird-debugsourceRed HatIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 Mediumthunderbird-debugsourceRed HatKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 Mediumthunderbird-debugsourceRed HatWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 High- Show moreLoading…