thunderbird-debugsource vulnerabilities (Red Hat)
1,010 vulnerabilities.
thunderbird-debugsourceRed HatUse-after-free in the Audio/Video component8.8 Highthunderbird-debugsourceRed HatMitigation bypass in the DOM: Core & HTML component6.1 Mediumthunderbird-debugsourceRed HatRace condition in the Graphics component7.5 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 Highthunderbird-debugsourceRed HatAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 Mediumthunderbird-debugsourceRed HatSome non-writable Object properties could be modified6.5 Mediumthunderbird-debugsourceRed HatCross-process information leaked due to malicious IPC messages9.8 Criticalthunderbird-debugsourceRed HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 Criticalthunderbird-debugsourceRed HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highthunderbird-debugsourceRed HatInformation disclosure in the Networking: Cache component6.2 Mediumthunderbird-debugsourceRed HatInteger overflow in the SVG component8.8 Highthunderbird-debugsourceRed HatIncorrect boundary conditions in the JavaScript: GC component6.5 Mediumthunderbird-debugsourceRed HatSame-origin policy bypass in the Layout component6.5 Mediumthunderbird-debugsourceRed HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highthunderbird-debugsourceRed HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highthunderbird-debugsourceRed HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highthunderbird-debugsourceRed HatUninitialized memory in the JavaScript Engine component6.5 Mediumthunderbird-debugsourceRed HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highthunderbird-debugsourceRed HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highthunderbird-debugsourceRed HatIncorrect JavaScript state machine for generators6.5 Mediumthunderbird-debugsourceRed HatXSLT documents could bypass CSP8.1 Highthunderbird-debugsourceRed HatIncorrect URL stripping in CSP reports9.8 Criticalthunderbird-debugsourceRed HatPotential user-assisted code execution in “Copy as cURL” command8.1 Highthunderbird-debugsourceRed Hatjavascript: URLs executed on object and embed tags8.1 Highthunderbird-debugsourceRed HatLarge branch table could lead to truncated instruction9.8 Criticalthunderbird-debugsourceRed HatJavaScript engine only wrote partial return value to stack6.5 Mediumthunderbird-debugsourceRed HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumthunderbird-debugsourceRed HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumthunderbird-debugsourceRed HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumthunderbird-debugsourceRed HatUse-after-free in FontFaceSet9.8 Criticalthunderbird-debugsourceRed HatUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 Mediumthunderbird-debugsourceRed HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Mediumthunderbird-debugsourceRed HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highthunderbird-debugsourceRed HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highthunderbird-debugsourceRed HatClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumthunderbird-debugsourceRed HatScript element events leaked cross-origin resource status4.3 Mediumthunderbird-debugsourceRed HatPotential local code execution in “Copy as cURL” command4.8 Mediumthunderbird-debugsourceRed HatError handling for script execution was incorrectly isolated from web content4.3 Mediumthunderbird-debugsourceRed HatOut-of-bounds access when optimizing linear sums8.8 Highthunderbird-debugsourceRed HatOut-of-bounds access when resolving Promise objects9.8 Criticalthunderbird-debugsourceRed HatTracking Links in Attachments Bypassed Remote Content Blocking6.5 Mediumthunderbird-debugsourceRed HatJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 Highthunderbird-debugsourceRed HatA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 Highthunderbird-debugsourceRed HatSender Spoofing via Malformed From Header in Thunderbird7.5 Highthunderbird-debugsourceRed HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 High- Show moreLoading…