thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighthunderbirdRed HatA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumthunderbirdRed HatDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighthunderbirdRed HatIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdRed HatNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumthunderbirdRed HatVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 HighthunderbirdRed HatElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighthunderbirdRed HatMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalthunderbirdRed HatDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumthunderbirdRed HatA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumthunderbirdRed HatWith a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...10.0 CriticalthunderbirdRed HatDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighthunderbirdRed HatMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighthunderbirdRed HatMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighthunderbirdRed HatBrowsing Context potentially not cleared when closing Private Window7.5 HighthunderbirdRed HatXLL file extensions were downloadable without warnings4.3 MediumthunderbirdRed HatPush notifications saved to disk unencrypted6.5 MediumthunderbirdRed HatError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumthunderbirdRed HatMemory corruption in JIT UpdateRegExpStatics6.5 MediumthunderbirdRed HatMemory corruption in IPC FilePickerShownCallback6.5 MediumthunderbirdRed HatMemory corruption in IPC ColorPickerShownCallback6.5 MediumthunderbirdRed HatMemory corruption in IPC CanvasTranslator6.5 MediumthunderbirdRed HatMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalthunderbirdRed HatMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalthunderbirdRed HatWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighthunderbirdRed HatFull screen notification obscured by external program6.5 MediumthunderbirdRed HatFull screen notification obscured by file open dialog7.5 HighthunderbirdRed HatIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighthunderbirdRed HatRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumthunderbirdRed HatAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighthunderbirdRed HatA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdRed HatIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumthunderbirdRed HatOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumthunderbirdRed HatFile Extension Spoofing using the Text Direction Override Character7.5 HighthunderbirdRed HatUse-after-free in workers8.8 HighthunderbirdRed HatMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighthunderbirdRed HatWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighthunderbirdRed HatA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumthunderbirdRed HatCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdRed HatAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighthunderbirdRed HatMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdRed HatThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdRed HatMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighthunderbirdRed HatWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdRed HatAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdRed HatA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdRed HatA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdRed HatAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdRed HatIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumthunderbirdRed HatRibose RNP before 0.16.3 may hang when the input is malformed.5.3 Medium- Show moreLoading…