thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 Highthunderbird-debugsourceRed HatIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 Highthunderbird-debugsourceRed HatGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 Highthunderbird-debugsourceRed HatTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 Lowthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 Highthunderbird-debugsourceRed HatIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 Highthunderbird-debugsourceRed HatA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Mediumthunderbird-debugsourceRed HatUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Mediumthunderbird-debugsourceRed HatThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Mediumthunderbird-debugsourceRed Hat`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 Highthunderbird-debugsourceRed HatReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 Highthunderbird-debugsourceRed HatThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 Highthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 Highthunderbird-debugsourceRed HatIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 Highthunderbird-debugsourceRed HatSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Mediumthunderbird-debugsourceRed HatA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Mediumthunderbird-debugsourceRed HatIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Mediumthunderbird-debugsourceRed HatA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Mediumthunderbird-debugsourceRed HatThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Mediumthunderbird-debugsourceRed HatWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 Highthunderbird-debugsourceRed HatAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 Highthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 Highthunderbird-debugsourceRed HatIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Mediumthunderbird-debugsourceRed HatA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 Highthunderbird-debugsourceRed HatA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highthunderbird-debugsourceRed HatA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Mediumthunderbird-debugsourceRed HatWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 Mediumthunderbird-debugsourceRed HatA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 Mediumthunderbird-debugsourceRed HatIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumthunderbird-debugsourceRed HatAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 Mediumthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 Highthunderbird-debugsourceRed HatThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 Highthunderbird-debugsourceRed HatA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 Highthunderbird-debugsourceRed HatThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 Highthunderbird-debugsourceRed HatThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 Mediumthunderbird-debugsourceRed HatA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 Highthunderbird-debugsourceRed HatFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 Highthunderbird-debugsourceRed HatWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Mediumthunderbird-debugsourceRed HatThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 Highthunderbird-debugsourceRed HatThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 Mediumthunderbird-debugsourceRed HatWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 Mediumthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 Highthunderbird-debugsourceRed HatRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 Mediumthunderbird-debugsourceRed HatWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 Highthunderbird-debugsourceRed HatOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 Highthunderbird-debugsourceRed HatThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 Mediumthunderbird-debugsourceRed HatIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 Mediumthunderbird-debugsourceRed HatOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 Mediumthunderbird-debugsourceRed HatAddress bar spoofing via bidirectional characters6.5 Mediumthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Critical- Show moreLoading…