thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 Highthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalthunderbird-debugsourceRed HatA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highthunderbird-debugsourceRed HatA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highthunderbird-debugsourceRed HatBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediumthunderbird-debugsourceRed HatA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediumthunderbird-debugsourceRed HatIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highthunderbird-debugsourceRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highthunderbird-debugsourceRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highthunderbird-debugsourceRed HatA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalthunderbird-debugsourceRed HatWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 Mediumthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalthunderbird-debugsourceRed HatIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediumthunderbird-debugsourceRed HatA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalthunderbird-debugsourceRed HatThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalthunderbird-debugsourceRed HatInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highthunderbird-debugsourceRed HatA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalthunderbird-debugsourceRed HatThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Mediumthunderbird-debugsourceRed HatIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 Highthunderbird-debugsourceRed HatUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 Highthunderbird-debugsourceRed HatANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Mediumthunderbird-debugsourceRed HatIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 Highthunderbird-debugsourceRed HatEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 Highthunderbird-debugsourceRed HatIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 Highthunderbird-debugsourceRed HatA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 Highthunderbird-debugsourceRed HatInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Criticalthunderbird-debugsourceRed HatSelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 Mediumthunderbird-debugsourceRed HatType Confusion in Async Generators in Javascript Engine7.5 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 Highthunderbird-debugsourceRed HatMemory corruption in thread creation7.4 Highthunderbird-debugsourceRed HatMemory corruption in NSS9.8 Criticalthunderbird-debugsourceRed HatRace condition in permission assignment4.7 Mediumthunderbird-debugsourceRed HatMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 Highthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 Highthunderbird-debugsourceRed HatBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 Highthunderbird-debugsourceRed HatOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Mediumthunderbird-debugsourceRed HatBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Mediumthunderbird-debugsourceRed HatBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Mediumthunderbird-debugsourceRed HatIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 Highthunderbird-debugsourceRed HatMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 Highthunderbird-debugsourceRed HatWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 Highthunderbird-debugsourceRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 Mediumthunderbird-debugsourceRed HatA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Mediumthunderbird-debugsourceRed HatIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 Mediumthunderbird-debugsourceRed HatPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 Highthunderbird-debugsourceRed HatMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 Highthunderbird-debugsourceRed HatThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 Lowthunderbird-debugsourceRed HatIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Mediumthunderbird-debugsourceRed HatOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Medium- Show moreLoading…