MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighMozillaThunderbirdSUSEIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumMozillaThunderbirdSUSEA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 MediumMozillaThunderbirdSUSEThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 HighMozillaThunderbirdSUSEMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighMozillaThunderbirdSUSEMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumMozillaThunderbirdSUSEAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumMozillaThunderbirdSUSESecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumMozillaThunderbirdSUSEWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumMozillaThunderbirdSUSEWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumMozillaThunderbirdSUSEWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighMozillaThunderbirdSUSECertain network request objects were freed too early when releasing a network request handle....8.8 HighMozillaThunderbirdSUSEMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumMozillaThunderbirdSUSEApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighMozillaThunderbirdSUSEConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighMozillaThunderbirdSUSEIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalMozillaThunderbirdSUSEWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 MediumMozillaThunderbirdSUSEThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalMozillaThunderbirdSUSEThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumMozillaThunderbirdSUSEIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumMozillaThunderbirdSUSEUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumMozillaThunderbirdSUSEDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumMozillaThunderbirdSUSEUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumMozillaThunderbirdSUSEWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumMozillaThunderbirdSUSEFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighMozillaThunderbirdSUSEBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumMozillaThunderbirdSUSEAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighMozillaThunderbirdSUSEUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumMozillaThunderbirdSUSEThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighMozillaThunderbirdSUSEMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumMozillaThunderbirdSUSEDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumMozillaThunderbirdSUSEBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumMozillaThunderbirdSUSEThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumMozillaThunderbirdSUSEThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumMozillaThunderbirdSUSEWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighMozillaThunderbirdSUSEThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalMozillaThunderbirdSUSEThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaThunderbirdSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaThunderbirdSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaThunderbirdSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaThunderbirdSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighMozillaThunderbirdSUSEThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...5.9 MediumMozillaThunderbirdSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaThunderbirdSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaThunderbirdSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaThunderbirdSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 Medium- Show moreLoading…