thunderbird vulnerabilities (Rocky Linux)
795 vulnerabilities.
thunderbirdRocky LinuxMitigation bypass in the DOM: Core & HTML component6.1 MediumthunderbirdRocky LinuxRace condition in the Graphics component7.5 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdRocky LinuxAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumthunderbirdRocky LinuxSome non-writable Object properties could be modified6.5 MediumthunderbirdRocky LinuxCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdRocky LinuxOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdRocky LinuxUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdRocky LinuxInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdRocky LinuxInteger overflow in the SVG component8.8 HighthunderbirdRocky LinuxIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdRocky LinuxSame-origin policy bypass in the Layout component6.5 MediumthunderbirdRocky LinuxSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdRocky LinuxSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdRocky LinuxDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdRocky LinuxUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdRocky LinuxSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdRocky LinuxSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdRocky LinuxIncorrect JavaScript state machine for generators6.5 MediumthunderbirdRocky LinuxXSLT documents could bypass CSP8.1 HighthunderbirdRocky LinuxIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdRocky LinuxPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdRocky Linuxjavascript: URLs executed on object and embed tags8.1 HighthunderbirdRocky LinuxLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdRocky LinuxJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdRocky LinuxContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdRocky LinuxIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdRocky LinuxThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdRocky LinuxUse-after-free in FontFaceSet9.8 CriticalthunderbirdRocky LinuxUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdRocky LinuxUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumthunderbirdRocky LinuxMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdRocky LinuxClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdRocky LinuxScript element events leaked cross-origin resource status4.3 MediumthunderbirdRocky LinuxPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdRocky LinuxError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdRocky LinuxOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdRocky LinuxOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdRocky LinuxTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdRocky LinuxJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdRocky LinuxA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighthunderbirdRocky LinuxSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdRocky LinuxMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdRocky LinuxMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 High- Show moreLoading…