MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighMozillaThunderbirdSUSEWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighMozillaThunderbirdSUSEBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighMozillaThunderbirdSUSEWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighMozillaThunderbirdSUSEusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumMozillaThunderbirdSUSEBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 MediumMozillaThunderbirdSUSEWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 MediumMozillaThunderbirdSUSEIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumMozillaThunderbirdSUSEWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumMozillaThunderbirdSUSEWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighMozillaThunderbirdSUSEIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumMozillaThunderbirdSUSEIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighMozillaThunderbirdSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaThunderbirdSUSEDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 MediumMozillaThunderbirdSUSEDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighMozillaThunderbirdSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaThunderbirdSUSEDuring the initialization of a new content process, a pointer offset can be manipulated leading...8.8 HighMozillaThunderbirdSUSEWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighMozillaThunderbirdSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighMozillaThunderbirdSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighMozillaThunderbirdSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighMozillaThunderbirdSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighMozillaThunderbirdSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighMozillaThunderbirdSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighMozillaThunderbirdSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaThunderbirdSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaThunderbirdSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaThunderbirdSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaThunderbirdSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaThunderbirdSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaThunderbirdSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaThunderbirdSUSEA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 HighMozillaThunderbirdSUSEEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumMozillaThunderbirdSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaThunderbirdSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaThunderbirdSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaThunderbirdSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaThunderbirdSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaThunderbirdSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaThunderbirdSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighMozillaThunderbirdSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaThunderbirdSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaThunderbirdSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaThunderbirdSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaThunderbirdSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Medium- Show moreLoading…