MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumMozillaThunderbirdSUSEMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighMozillaThunderbirdSUSEThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 MediumMozillaThunderbirdSUSEA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighMozillaThunderbirdSUSEAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighMozillaThunderbirdSUSEIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighMozillaThunderbirdSUSEMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighMozillaThunderbirdSUSEUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumMozillaThunderbirdSUSEIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumMozillaThunderbirdSUSEKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumMozillaThunderbirdSUSEWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighMozillaThunderbirdSUSECross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumMozillaThunderbirdSUSEWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumMozillaThunderbirdSUSEThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighMozillaThunderbirdSUSEThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumMozillaThunderbirdSUSEIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalMozillaThunderbirdSUSEFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumMozillaThunderbirdSUSEThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumMozillaThunderbirdSUSEService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumMozillaThunderbirdSUSEWhen saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple...7.8 HighMozillaThunderbirdSUSEMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaThunderbirdSUSEIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumMozillaThunderbirdSUSECertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighMozillaThunderbirdSUSEA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighMozillaThunderbirdSUSEMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighMozillaThunderbirdSUSEMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighMozillaThunderbirdSUSEMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighMozillaThunderbirdSUSEMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumMozillaThunderbirdSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaThunderbirdSUSEAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 MediumMozillaThunderbirdSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaThunderbirdSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaThunderbirdSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaThunderbirdSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaThunderbirdSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaThunderbirdSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaThunderbirdSUSEPrototype pollution in matrix-js-sdk8.2 HighMozillaThunderbirdSUSEWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumMozillaThunderbirdSUSEIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighMozillaThunderbirdSUSEWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumMozillaThunderbirdSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaThunderbirdSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaThunderbirdSUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaThunderbirdSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaThunderbirdSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaThunderbirdSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighMozillaThunderbirdSUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighMozillaThunderbirdSUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumMozillaThunderbirdSUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 MediumMozillaThunderbirdSUSEAn OpenPGP digital signature includes information about the date when the signature was created....6.5 Medium- Show moreLoading…