thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumthunderbirdRed Hatpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumthunderbirdRed HatWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumthunderbirdRed HatAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalthunderbirdRed HatCross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumthunderbirdRed HatA flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird...5.3 MediumthunderbirdRed HatA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalthunderbirdRed HatA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumthunderbirdRed HatA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalthunderbirdRed HatAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighthunderbirdRed HatIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighthunderbirdRed HatA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighthunderbirdRed HatWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighthunderbirdRed HatWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighthunderbirdRed HatA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighthunderbirdRed HatA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...6.5 MediumthunderbirdRed HatIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumthunderbirdRed HatA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalthunderbirdRed HatMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalthunderbirdRed HatPlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...4.3 MediumthunderbirdRed HatdDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...6.5 MediumthunderbirdRed HatDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...6.5 MediumthunderbirdRed HatMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalthunderbirdRed HatAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumthunderbirdRed HatA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumthunderbirdRed HatNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighthunderbirdRed HatA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighthunderbirdRed HatAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighthunderbirdRed HatA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighthunderbirdRed HatA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighthunderbirdRed HatPlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 MediumthunderbirdRed HatUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 HighthunderbirdRed HatIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 MediumthunderbirdRed HatPlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 HighthunderbirdRed HatCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 MediumthunderbirdRed HatMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalthunderbirdRed HatA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighthunderbirdRed HatSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumthunderbirdRed HatAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalthunderbirdRed HatMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalthunderbirdRed HatAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 High- Show moreLoading…