thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalthunderbirdRed HatA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalthunderbirdRed HatWhen displaying the sender of an email, and the sender name contained the Braille Pattern Blank...6.5 MediumthunderbirdRed HatIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighthunderbirdRed HatAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighthunderbirdRed HatThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 MediumthunderbirdRed HatWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 MediumthunderbirdRed HatMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalthunderbirdRed HatFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumthunderbirdRed HatWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdRed HatRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdRed HatAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdRed HatDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighthunderbirdRed HatWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdRed HatMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdRed HatDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdRed HatWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdRed HatBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdRed HatIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdRed HatAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdRed Hat<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdRed HatWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighthunderbirdRed HatPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdRed HatIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdRed HatWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdRed HatAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdRed HatRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdRed HatAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalthunderbirdRed HatRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighthunderbirdRed HatIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalthunderbirdRed HatIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdRed Hatxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalthunderbirdRed Hatxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalthunderbirdRed HatMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRed HatWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdRed HatWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdRed HatIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdRed HatIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdRed HatIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdRed HatMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdRed HatMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdRed HatAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdRed HatSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdRed HatWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdRed HatWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdRed HatWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdRed HatCertain network request objects were freed too early when releasing a network request handle....8.8 HighthunderbirdRed HatMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumthunderbirdRed HatApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 High- Show moreLoading…