thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdRed HatUnsafe attribute access during XPath parsing4.8 MediumthunderbirdRed HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdRed HatPrivilege escalation in Thunderbird Updater8.8 HighthunderbirdRed HatUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdRed HatLeak of hashed Window credentials via crafted attachment URL6.3 MediumthunderbirdRed HatInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdRed HatURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdRed HatUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdRed HatCrafted email message incorrectly shown as being encrypted7.0 HighthunderbirdRed HatDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdRed HatUnsanitized address book fields5.4 MediumthunderbirdRed HatAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalthunderbirdRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdRed HatCertificate length was not properly checked8.8 HighthunderbirdRed HatPotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdRed HatUse-after-free during concurrent delazification7.5 HighthunderbirdRed HatA bug in WebAssembly code generation could result in a crash8.8 HighthunderbirdRed HatUse-after-free in Custom Highlight8.8 HighthunderbirdRed HatUse-after-free in XSLT9.8 CriticalthunderbirdRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumthunderbirdRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdRed HatMemory corruption when using JavaScript Text Segmentation7.7 HighthunderbirdRed HatCompartment mismatch when parsing JavaScript JSON module4.0 MediumthunderbirdRed HatAlt-Svc ALPN validation failure when redirected4.0 MediumthunderbirdRed HatUse-after-free when breaking lines in text5.3 MediumthunderbirdRed HatWebChannel APIs susceptible to confused deputy attack5.4 MediumthunderbirdRed Hatidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 MediumthunderbirdRed HatMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighthunderbirdRed HatWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighthunderbirdRed HatThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumthunderbirdRed HatA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumthunderbirdRed HatEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumthunderbirdRed HatAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumthunderbirdRed HatUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 MediumthunderbirdRed HatMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighthunderbirdRed HatBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighthunderbirdRed HatA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumthunderbirdRed HatRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumthunderbirdRed HatVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumthunderbirdRed HatTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumthunderbirdRed HatIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumthunderbirdRed HatThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumthunderbirdRed HatAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighthunderbirdRed HatA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighthunderbirdRed HatAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Critical- Show moreLoading…