MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalMozillaThunderbirdSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalMozillaThunderbirdSUSERSS fields can inject new lines into the created email structure, modifying the message body....5.3 MediumMozillaThunderbirdSUSECrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....4.3 MediumMozillaThunderbirdSUSEIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...8.8 HighMozillaThunderbirdSUSEIt is possible to spoof the sender's email address and display an arbitrary sender address to the...5.3 MediumMozillaThunderbirdSUSEThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumMozillaThunderbirdSUSEA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalMozillaThunderbirdSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumMozillaThunderbirdSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 MediumMozillaThunderbirdSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalMozillaThunderbirdSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumMozillaThunderbirdSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalMozillaThunderbirdSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalMozillaThunderbirdSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighMozillaThunderbirdSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalMozillaThunderbirdSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 HighMozillaThunderbirdSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 MediumMozillaThunderbirdSUSEA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighMozillaThunderbirdSUSEWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighMozillaThunderbirdSUSEA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalMozillaThunderbirdSUSEThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighMozillaThunderbirdSUSEA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalMozillaThunderbirdSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumMozillaThunderbirdSUSESame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 HighMozillaThunderbirdSUSEA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 CriticalMozillaThunderbirdSUSEA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur when reading an image observer during frame...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 CriticalMozillaThunderbirdSUSEAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...9.1 CriticalMozillaThunderbirdSUSEThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...7.5 HighMozillaThunderbirdSUSEDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...5.3 MediumMozillaThunderbirdSUSEA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...9.8 CriticalMozillaThunderbirdSUSEUse of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:...8.8 HighMozillaThunderbirdSUSEHeap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:...8.1 HighMozillaThunderbirdSUSEUpdated firefox packages fix security vulnerabilities9.8 CriticalMozillaThunderbirdSUSEOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...9.1 CriticalMozillaThunderbirdSUSEHeap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src...8.8 HighMozillaThunderbirdSUSEHeap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.8.8 HighMozillaThunderbirdSUSEOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.8.1 HighMozillaThunderbirdSUSECharacters from the "Canadian Syllabics" unicode block can be mixed with characters from other...5.3 MediumMozillaThunderbirdSUSEAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...9.1 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while...9.8 Critical- Show moreLoading…