MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumMozillaThunderbirdSUSEWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighMozillaThunderbirdSUSESearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighMozillaThunderbirdSUSESome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumMozillaThunderbirdSUSEWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumMozillaThunderbirdSUSEIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighMozillaThunderbirdSUSEDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighMozillaThunderbirdSUSEFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumMozillaThunderbirdSUSEIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumMozillaThunderbirdSUSEIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumMozillaThunderbirdSUSEA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumMozillaThunderbirdSUSESide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumMozillaThunderbirdSUSEIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalMozillaThunderbirdSUSEHeap buffer overflow in CefSharp9.6 CriticalMozillaThunderbirdSUSEUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighMozillaThunderbirdSUSEWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighMozillaThunderbirdSUSEBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumMozillaThunderbirdSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighMozillaThunderbirdSUSEIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighMozillaThunderbirdSUSEWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighMozillaThunderbirdSUSEBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighMozillaThunderbirdSUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumMozillaThunderbirdSUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumMozillaThunderbirdSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaThunderbirdSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaThunderbirdSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaThunderbirdSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaThunderbirdSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaThunderbirdSUSEIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighMozillaThunderbirdSUSEMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighMozillaThunderbirdSUSEWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumMozillaThunderbirdSUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighMozillaThunderbirdSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighMozillaThunderbirdSUSEBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumMozillaThunderbirdSUSEA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalMozillaThunderbirdSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumMozillaThunderbirdSUSEA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighMozillaThunderbirdSUSEMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalMozillaThunderbirdSUSEOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighMozillaThunderbirdSUSEWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighMozillaThunderbirdSUSEUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighMozillaThunderbirdSUSEUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalMozillaThunderbirdSUSEThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Medium- Show moreLoading…