thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighthunderbirdRed HatMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalthunderbirdRed HatMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalthunderbirdRed HatA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighthunderbirdRed HatA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighthunderbirdRed HatBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumthunderbirdRed HatA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumthunderbirdRed HatIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighthunderbirdRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdRed HatA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalthunderbirdRed HatWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 MediumthunderbirdRed HatMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalthunderbirdRed HatIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumthunderbirdRed HatA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalthunderbirdRed HatThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalthunderbirdRed HatInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighthunderbirdRed HatA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalthunderbirdRed HatThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumthunderbirdRed HatIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighthunderbirdRed HatUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighthunderbirdRed HatANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumthunderbirdRed HatIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighthunderbirdRed HatEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighthunderbirdRed HatIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighthunderbirdRed HatA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighthunderbirdRed HatInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalthunderbirdRed HatSelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumthunderbirdRed HatType Confusion in Async Generators in Javascript Engine7.5 HighthunderbirdRed HatMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighthunderbirdRed HatMemory corruption in thread creation7.4 HighthunderbirdRed HatMemory corruption in NSS9.8 CriticalthunderbirdRed HatRace condition in permission assignment4.7 MediumthunderbirdRed HatMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighthunderbirdRed HatMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighthunderbirdRed HatBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighthunderbirdRed HatOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumthunderbirdRed HatBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumthunderbirdRed HatBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumthunderbirdRed HatIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighthunderbirdRed HatMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighthunderbirdRed HatWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighthunderbirdRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumthunderbirdRed HatA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumthunderbirdRed HatIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumthunderbirdRed HatPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighthunderbirdRed HatMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighthunderbirdRed HatThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowthunderbirdRed HatIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 MediumthunderbirdRed HatOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Medium- Show moreLoading…