thunderbird vulnerabilities (Red Hat)
1,785 vulnerabilities.
thunderbirdRed HatUse-after-free in the Audio/Video component8.8 HighthunderbirdRed HatMitigation bypass in the DOM: Core & HTML component6.1 MediumthunderbirdRed HatRace condition in the Graphics component7.5 HighthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdRed HatAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumthunderbirdRed HatSome non-writable Object properties could be modified6.5 MediumthunderbirdRed HatCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdRed HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdRed HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdRed HatInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdRed HatInteger overflow in the SVG component8.8 HighthunderbirdRed HatIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdRed HatSame-origin policy bypass in the Layout component6.5 MediumthunderbirdRed HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdRed HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdRed HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdRed HatUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdRed HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdRed HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdRed HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdRed HatIncorrect JavaScript state machine for generators6.5 MediumthunderbirdRed HatXSLT documents could bypass CSP8.1 HighthunderbirdRed HatIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdRed HatPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdRed Hatjavascript: URLs executed on object and embed tags8.1 HighthunderbirdRed HatLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdRed HatJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdRed HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdRed HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdRed HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdRed HatUse-after-free in FontFaceSet9.8 CriticalthunderbirdRed HatUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdRed HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumthunderbirdRed HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdRed HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdRed HatClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdRed HatScript element events leaked cross-origin resource status4.3 MediumthunderbirdRed HatPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdRed HatError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdRed HatOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdRed HatOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdRed HatTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdRed HatJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdRed HatA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighthunderbirdRed HatSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdRed HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 High- Show moreLoading…