MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaThunderbirdSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaThunderbirdSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaThunderbirdSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaThunderbirdSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaThunderbirdSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaThunderbirdSUSEData race in crossbeam-deque9.8 CriticalMozillaThunderbirdSUSEIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighMozillaThunderbirdSUSEA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighMozillaThunderbirdSUSEOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighMozillaThunderbirdSUSEA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighMozillaThunderbirdSUSEThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighMozillaThunderbirdSUSEIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumMozillaThunderbirdSUSEOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumMozillaThunderbirdSUSESignatures are written to disk before and read during verification, which might be subject to a...2.5 LowMozillaThunderbirdSUSEPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighMozillaThunderbirdSUSEThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumMozillaThunderbirdSUSEWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighMozillaThunderbirdSUSEIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighMozillaThunderbirdSUSEThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumMozillaThunderbirdSUSEWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighMozillaThunderbirdSUSEA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighMozillaThunderbirdSUSEThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumMozillaThunderbirdSUSEIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 MediumMozillaThunderbirdSUSEThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 HighMozillaThunderbirdSUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighMozillaThunderbirdSUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumMozillaThunderbirdSUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumMozillaThunderbirdSUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighMozillaThunderbirdSUSEWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumMozillaThunderbirdSUSEAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumMozillaThunderbirdSUSEIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighMozillaThunderbirdSUSEFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighMozillaThunderbirdSUSEPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighMozillaThunderbirdSUSEUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighMozillaThunderbirdSUSEIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumMozillaThunderbirdSUSEUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighMozillaThunderbirdSUSEDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighMozillaThunderbirdSUSEIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighMozillaThunderbirdSUSEWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumMozillaThunderbirdSUSEUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumMozillaThunderbirdSUSEWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumMozillaThunderbirdSUSEWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighMozillaThunderbirdSUSECertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighMozillaThunderbirdSUSECertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 High- Show moreLoading…