thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumthunderbirdRocky LinuxApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighthunderbirdRocky LinuxConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdRocky LinuxIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalthunderbirdRocky LinuxThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdRocky LinuxMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdRocky LinuxIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdRocky LinuxUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdRocky LinuxDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdRocky LinuxUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdRocky LinuxWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdRocky LinuxFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdRocky LinuxBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdRocky LinuxAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdRocky LinuxUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdRocky LinuxThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 CriticalthunderbirdRocky LinuxA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdRocky LinuxMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdRocky LinuxDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdRocky LinuxBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdRocky LinuxThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdRocky LinuxThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdRocky LinuxWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdRocky LinuxThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdRocky LinuxThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdRocky LinuxDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighthunderbirdRocky LinuxThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdRocky LinuxDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdRocky LinuxFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdRocky LinuxA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdRocky LinuxA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdRocky LinuxInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdRocky LinuxUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdRocky LinuxData race in crossbeam-deque9.8 CriticalthunderbirdRocky LinuxIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdRocky LinuxA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdRocky LinuxOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdRocky LinuxMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdRocky LinuxIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdRocky LinuxOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 Medium