thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighthunderbirdRocky LinuxWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumthunderbirdRocky LinuxA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalthunderbirdRocky LinuxA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalthunderbirdRocky LinuxWhen displaying the sender of an email, and the sender name contained the Braille Pattern Blank...6.5 MediumthunderbirdRocky LinuxIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighthunderbirdRocky LinuxAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighthunderbirdRocky LinuxThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 MediumthunderbirdRocky LinuxWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 MediumthunderbirdRocky LinuxMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalthunderbirdRocky LinuxFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumthunderbirdRocky LinuxWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdRocky LinuxRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdRocky LinuxAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdRocky LinuxDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighthunderbirdRocky LinuxWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdRocky LinuxMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdRocky LinuxDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdRocky LinuxWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdRocky LinuxBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdRocky LinuxIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdRocky LinuxAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdRocky Linux<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdRocky LinuxWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighthunderbirdRocky LinuxPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdRocky LinuxIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdRocky LinuxWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdRocky LinuxAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdRocky LinuxRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdRocky LinuxAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalthunderbirdRocky LinuxRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighthunderbirdRocky LinuxIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalthunderbirdRocky LinuxIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdRocky Linuxxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalthunderbirdRocky Linuxxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalthunderbirdRocky LinuxMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRocky LinuxWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdRocky LinuxWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdRocky LinuxWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdRocky LinuxIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdRocky LinuxIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdRocky LinuxIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdRocky LinuxMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdRocky LinuxMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdRocky LinuxAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdRocky LinuxSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdRocky LinuxWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdRocky LinuxWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdRocky LinuxWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdRocky LinuxCertain network request objects were freed too early when releasing a network request handle....8.8 High- Show moreLoading…