MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaThunderbirdSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaThunderbirdSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaThunderbirdSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaThunderbirdSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaThunderbirdSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaThunderbirdSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaThunderbirdSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumMozillaThunderbirdSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaThunderbirdSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaThunderbirdSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaThunderbirdSUSEInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalMozillaThunderbirdSUSEA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighMozillaThunderbirdSUSEA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighMozillaThunderbirdSUSEA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalMozillaThunderbirdSUSEA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalMozillaThunderbirdSUSEA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalMozillaThunderbirdSUSEA race condition is present in the crash generation server used to generate data for the crash...8.3 HighMozillaThunderbirdSUSEIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 HighMozillaThunderbirdSUSEA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 HighMozillaThunderbirdSUSEA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalMozillaThunderbirdSUSEA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalMozillaThunderbirdSUSEImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumMozillaThunderbirdSUSEA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalMozillaThunderbirdSUSEIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumMozillaThunderbirdSUSEThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalMozillaThunderbirdSUSEFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 MediumMozillaThunderbirdSUSEA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 CriticalMozillaThunderbirdSUSEIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighMozillaThunderbirdSUSEIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighMozillaThunderbirdSUSECross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumMozillaThunderbirdSUSEA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalMozillaThunderbirdSUSEA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalMozillaThunderbirdSUSEA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumMozillaThunderbirdSUSEThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalMozillaThunderbirdSUSEThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalMozillaThunderbirdSUSEA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalMozillaThunderbirdSUSELack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 MediumMozillaThunderbirdSUSEIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumMozillaThunderbirdSUSEpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumMozillaThunderbirdSUSEWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumMozillaThunderbirdSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Critical- Show moreLoading…