thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxUnsafe attribute access during XPath parsing4.8 MediumthunderbirdRocky LinuxProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdRocky LinuxPrivilege escalation in Thunderbird Updater8.8 HighthunderbirdRocky LinuxUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdRocky LinuxLeak of hashed Window credentials via crafted attachment URL6.3 MediumthunderbirdRocky LinuxInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdRocky LinuxURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdRocky LinuxUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdRocky LinuxUnsanitized address book fields5.4 MediumthunderbirdRocky LinuxAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdRocky LinuxCertificate length was not properly checked8.8 HighthunderbirdRocky LinuxPotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdRocky LinuxUse-after-free during concurrent delazification7.5 HighthunderbirdRocky LinuxA bug in WebAssembly code generation could result in a crash8.8 HighthunderbirdRocky LinuxUse-after-free in Custom Highlight8.8 HighthunderbirdRocky LinuxUse-after-free in XSLT9.8 CriticalthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdRocky LinuxImportant: thunderbird security updateNo scorethunderbirdRocky LinuxMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighthunderbirdRocky LinuxBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighthunderbirdRocky LinuxA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumthunderbirdRocky LinuxRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumthunderbirdRocky LinuxVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumthunderbirdRocky LinuxTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumthunderbirdRocky LinuxIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumthunderbirdRocky LinuxThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumthunderbirdRocky LinuxAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighthunderbirdRocky LinuxA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighthunderbirdRocky LinuxAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalthunderbirdRocky LinuxMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighthunderbirdRocky LinuxMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalthunderbirdRocky LinuxMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalthunderbirdRocky LinuxA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighthunderbirdRocky LinuxA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighthunderbirdRocky LinuxBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumthunderbirdRocky LinuxA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumthunderbirdRocky LinuxIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighthunderbirdRocky LinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdRocky LinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdRocky LinuxA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalthunderbirdRocky LinuxWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 MediumthunderbirdRocky LinuxMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalthunderbirdRocky LinuxIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumthunderbirdRocky LinuxA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Critical- Show moreLoading…