thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumthunderbirdRed HatWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighthunderbirdRed HatIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighthunderbirdRed HatThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumthunderbirdRed HatWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighthunderbirdRed HatA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighthunderbirdRed HatAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 MediumthunderbirdRed HatThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumthunderbirdRed HatIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 MediumthunderbirdRed HatThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 HighthunderbirdRed HatAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 CriticalthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighthunderbirdRed HatA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumthunderbirdRed HatUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumthunderbirdRed HatA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighthunderbirdRed HatWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumthunderbirdRed HatAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumthunderbirdRed HatIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighthunderbirdRed HatFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighthunderbirdRed HatPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighthunderbirdRed HatUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighthunderbirdRed HatIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumthunderbirdRed HatUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighthunderbirdRed HatDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighthunderbirdRed HatWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumthunderbirdRed HatUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumthunderbirdRed HatWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumthunderbirdRed HatWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighthunderbirdRed HatCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighthunderbirdRed HatCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighthunderbirdRed HatUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumthunderbirdRed HatWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighthunderbirdRed HatSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumthunderbirdRed HatWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumthunderbirdRed HatIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighthunderbirdRed HatDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighthunderbirdRed HatFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumthunderbirdRed HatIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumthunderbirdRed HatIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumthunderbirdRed HatA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumthunderbirdRed HatSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumthunderbirdRed HatIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalthunderbirdRed HatUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighthunderbirdRed HatWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighthunderbirdRed HatBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Medium- Show moreLoading…