thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdRocky LinuxKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdRocky LinuxWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighthunderbirdRocky LinuxCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumthunderbirdRocky LinuxWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumthunderbirdRocky LinuxThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighthunderbirdRocky LinuxThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumthunderbirdRocky LinuxIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalthunderbirdRocky LinuxFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumthunderbirdRocky LinuxThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumthunderbirdRocky LinuxService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumthunderbirdRocky LinuxMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRocky LinuxIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumthunderbirdRocky LinuxCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighthunderbirdRocky LinuxA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighthunderbirdRocky LinuxMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighthunderbirdRocky LinuxMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighthunderbirdRocky LinuxMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighthunderbirdRocky LinuxMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumthunderbirdRocky LinuxInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumthunderbirdRocky LinuxMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighthunderbirdRocky LinuxConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumthunderbirdRocky LinuxDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumthunderbirdRocky LinuxBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumthunderbirdRocky LinuxWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumthunderbirdRocky Linuxlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighthunderbirdRocky LinuxPrototype pollution in matrix-js-sdk8.2 HighthunderbirdRocky LinuxWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumthunderbirdRocky LinuxIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighthunderbirdRocky LinuxWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumthunderbirdRocky LinuxMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighthunderbirdRocky LinuxMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRocky LinuxA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighthunderbirdRocky LinuxA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighthunderbirdRocky LinuxAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumthunderbirdRocky LinuxMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighthunderbirdRocky LinuxWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighthunderbirdRocky LinuxWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumthunderbirdRocky LinuxAn OpenPGP digital signature includes information about the date when the signature was created....6.5 MediumthunderbirdRocky LinuxThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighthunderbirdRocky LinuxIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighthunderbirdRocky LinuxA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumthunderbirdRocky LinuxIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumthunderbirdRocky LinuxSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalthunderbirdRocky LinuxAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighthunderbirdRocky LinuxIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighthunderbirdRocky LinuxMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 CriticalthunderbirdRocky LinuxAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumthunderbirdRocky LinuxAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumthunderbirdRocky LinuxA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 High- Show moreLoading…