thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 HighthunderbirdRed HatIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 HighthunderbirdRed HatGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 HighthunderbirdRed HatTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LowthunderbirdRed HatMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighthunderbirdRed HatIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighthunderbirdRed HatA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumthunderbirdRed HatUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumthunderbirdRed HatThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 MediumthunderbirdRed Hat`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighthunderbirdRed HatReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighthunderbirdRed HatThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 HighthunderbirdRed HatMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighthunderbirdRed HatIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighthunderbirdRed HatSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumthunderbirdRed HatA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumthunderbirdRed HatIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumthunderbirdRed HatA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumthunderbirdRed HatThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumthunderbirdRed HatWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighthunderbirdRed HatAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighthunderbirdRed HatMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighthunderbirdRed HatIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumthunderbirdRed HatA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighthunderbirdRed HatA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdRed HatA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumthunderbirdRed HatWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumthunderbirdRed HatA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumthunderbirdRed HatIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdRed HatAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumthunderbirdRed HatMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighthunderbirdRed HatThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighthunderbirdRed HatA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighthunderbirdRed HatThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighthunderbirdRed HatThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumthunderbirdRed HatA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighthunderbirdRed HatFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighthunderbirdRed HatWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumthunderbirdRed HatThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighthunderbirdRed HatThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 MediumthunderbirdRed HatWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 MediumthunderbirdRed HatMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighthunderbirdRed HatRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumthunderbirdRed HatWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighthunderbirdRed HatOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighthunderbirdRed HatThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumthunderbirdRed HatIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumthunderbirdRed HatOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumthunderbirdRed HatAddress bar spoofing via bidirectional characters6.5 MediumthunderbirdRed HatMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Critical- Show moreLoading…