thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighthunderbirdRed HatWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighthunderbirdRed HatBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighthunderbirdRed HatBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumthunderbirdRed HatInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumthunderbirdRed HatIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...5.9 MediumthunderbirdRed HatWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumthunderbirdRed HatWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighthunderbirdRed HatWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighthunderbirdRed HatManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumthunderbirdRed HatDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighthunderbirdRed HatIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighthunderbirdRed HatMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighthunderbirdRed HatWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumthunderbirdRed HatUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighthunderbirdRed HatBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumthunderbirdRed HatA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalthunderbirdRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumthunderbirdRed HatA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighthunderbirdRed HatMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalthunderbirdRed HatOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighthunderbirdRed HatWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighthunderbirdRed HatUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighthunderbirdRed HatUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalthunderbirdRed HatThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumthunderbirdRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighthunderbirdRed HatWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighthunderbirdRed HatBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighthunderbirdRed HatWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighthunderbirdRed Hatusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumthunderbirdRed HatWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 MediumthunderbirdRed HatIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumthunderbirdRed HatWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumthunderbirdRed HatWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighthunderbirdRed HatIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumthunderbirdRed HatIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighthunderbirdRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdRed HatDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighthunderbirdRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighthunderbirdRed HatUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighthunderbirdRed HatUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighthunderbirdRed HatWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 High- Show moreLoading…