thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighthunderbirdRed HatMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighthunderbirdRed HatFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumthunderbirdRed HatIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumthunderbirdRed HatBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumthunderbirdRed HatA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighthunderbirdRed HatAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighthunderbirdRed HatWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighthunderbirdRed HatEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumthunderbirdRed HatIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighthunderbirdRed HatIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighthunderbirdRed HatA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighthunderbirdRed HatSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumthunderbirdRed HatNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowthunderbirdRed HatA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighthunderbirdRed HatAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighthunderbirdRed HatA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumthunderbirdRed HatA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumthunderbirdRed HatDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumthunderbirdRed HatA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalthunderbirdRed HatPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighthunderbirdRed HatWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalthunderbirdRed HatInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalthunderbirdRed HatA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighthunderbirdRed HatA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighthunderbirdRed HatA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalthunderbirdRed HatA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdRed HatA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalthunderbirdRed HatA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalthunderbirdRed HatImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalthunderbirdRed HatIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumthunderbirdRed HatThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalthunderbirdRed HatIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighthunderbirdRed HatIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighthunderbirdRed HatCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumthunderbirdRed HatA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalthunderbirdRed HatA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalthunderbirdRed HatA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumthunderbirdRed HatThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalthunderbirdRed HatThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalthunderbirdRed HatA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalthunderbirdRed HatLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Medium- Show moreLoading…