thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdRed HataddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdRed Hatbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdRed HatdefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdRed HatIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalthunderbirdRed HatThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdRed HatMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdRed HatIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdRed HatUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdRed HatDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdRed HatUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdRed HatWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdRed HatFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdRed HatBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdRed HatAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdRed HatUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdRed HatNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...9.8 CriticalthunderbirdRed HatThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 CriticalthunderbirdRed HatA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdRed HatMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdRed HatDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdRed HatBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdRed HatThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdRed HatThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdRed HatWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdRed HatThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdRed HatThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdRed HatDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighthunderbirdRed HatThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdRed HatDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdRed HatFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdRed HatA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdRed HatA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdRed HatInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdRed HatUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdRed HatData race in crossbeam-deque9.8 CriticalthunderbirdRed HatIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdRed HatMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdRed HatA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdRed HatOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdRed HatMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdRed HatIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdRed HatOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumthunderbirdRed HatWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 HighthunderbirdRed HatSignatures are written to disk before and read during verification, which might be subject to a...2.5 LowthunderbirdRed HatPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 High- Show moreLoading…