thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighthunderbirdRocky LinuxMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdRocky LinuxThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdRocky LinuxMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighthunderbirdRocky LinuxWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdRocky LinuxAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdRocky LinuxA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdRocky LinuxA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdRocky LinuxAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdRocky LinuxIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumthunderbirdRocky LinuxRibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumthunderbirdRocky LinuxOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdRocky LinuxMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdRocky LinuxA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdRocky LinuxFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdRocky LinuxWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdRocky LinuxAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdRocky LinuxFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdRocky LinuxA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdRocky LinuxUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdRocky LinuxPrototype pollution in matrix-js-sdk8.2 HighthunderbirdRocky LinuxMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdRocky LinuxDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdRocky LinuxWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdRocky LinuxWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdRocky LinuxSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdRocky LinuxA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighthunderbirdRocky LinuxIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdRocky LinuxMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdRocky LinuxMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdRocky LinuxWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdRocky LinuxModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdRocky LinuxAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdRocky LinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdRocky LinuxWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdRocky LinuxA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdRocky LinuxPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighthunderbirdRocky LinuxThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdRocky LinuxAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdRocky LinuxCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdRocky LinuxCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdRocky LinuxContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdRocky LinuxURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdRocky LinuxMalicious command could be hidden in devtools output on Windows6.5 MediumthunderbirdRocky LinuxArbitrary file read from GTK drag and drop on Linux6.5 MediumthunderbirdRocky LinuxBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdRocky LinuxAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdRocky LinuxMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdRocky LinuxUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 Medium- Show moreLoading…