thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatUse after free in libwebp5.3 MediumthunderbirdRed HatOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdRed HatMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdRed HatA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdRed HatFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdRed HatWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdRed HatAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdRed HatFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdRed HatA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdRed HatUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdRed HatPrototype pollution in matrix-js-sdk8.2 HighthunderbirdRed HatMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdRed HatDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdRed HatWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdRed HatWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdRed HatSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdRed HatA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighthunderbirdRed HatIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdRed HatMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdRed HatMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRed HatWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdRed HatModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdRed HatAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdRed HatCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdRed HatWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdRed HatA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdRed HatPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighthunderbirdRed HatThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdRed HatAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdRed HatCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdRed HatCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdRed HatContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdRed HatURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdRed HatMalicious command could be hidden in devtools output on Windows6.5 MediumthunderbirdRed HatArbitrary file read from GTK drag and drop on Linux6.5 MediumthunderbirdRed HatBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdRed HatAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdRed HatA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalthunderbirdRed HatAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighthunderbirdRed HatA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumthunderbirdRed HatMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighthunderbirdRed HatA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighthunderbirdRed HatAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighthunderbirdRed HatIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighthunderbirdRed HatMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdRed HatUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumthunderbirdRed HatIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdRed HatKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdRed HatWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 High- Show moreLoading…