MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 HighMozillaThunderbirdSUSECertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumMozillaThunderbirdSUSEA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalMozillaThunderbirdSUSEWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 CriticalMozillaThunderbirdSUSEA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalMozillaThunderbirdSUSEA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalMozillaThunderbirdSUSEJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalMozillaThunderbirdSUSElibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...5.5 MediumMozillaThunderbirdSUSEA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalMozillaThunderbirdSUSEThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalMozillaThunderbirdSUSEURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumMozillaThunderbirdSUSEA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalMozillaThunderbirdSUSEHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighMozillaThunderbirdSUSEUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalMozillaThunderbirdSUSEJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalMozillaThunderbirdSUSEA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 HighMozillaThunderbirdSUSEAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighMozillaThunderbirdSUSEExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighMozillaThunderbirdSUSEUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalMozillaThunderbirdSUSEUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalMozillaThunderbirdSUSEMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighMozillaThunderbirdSUSEEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumMozillaThunderbirdSUSEMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighMozillaThunderbirdSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighMozillaThunderbirdSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalMozillaThunderbirdSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighMozillaThunderbirdSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalMozillaThunderbirdSUSESecurity update for MozillaThunderbirdNo scoreMozillaThunderbirdSUSESecurity update for MozillaThunderbirdNo scoreMozillaThunderbirdSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 CriticalMozillaThunderbirdSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumMozillaThunderbirdSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighMozillaThunderbirdSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighMozillaThunderbirdSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 MediumMozillaThunderbirdSUSEUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 HighMozillaThunderbirdSUSEUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 HighMozillaThunderbirdSUSEUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 CriticalMozillaThunderbirdSUSEStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 HighMozillaThunderbirdSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 MediumMozillaThunderbirdSUSEHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 HighMozillaThunderbirdSUSEHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 MediumMozillaThunderbirdSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 HighMozillaThunderbirdSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 MediumMozillaThunderbirdSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 HighMozillaThunderbirdSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 High- Show moreLoading…