MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumMozillaThunderbirdSUSEA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighMozillaThunderbirdSUSEAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumMozillaThunderbirdSUSEIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumMozillaThunderbirdSUSERibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumMozillaThunderbirdSUSEUse after free in libwebp5.3 MediumMozillaThunderbirdSUSEOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumMozillaThunderbirdSUSEMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighMozillaThunderbirdSUSEA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumMozillaThunderbirdSUSESimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 MediumMozillaThunderbirdSUSEA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 CriticalMozillaThunderbirdSUSEFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighMozillaThunderbirdSUSEWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighMozillaThunderbirdSUSEAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighMozillaThunderbirdSUSEFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumMozillaThunderbirdSUSEA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumMozillaThunderbirdSUSEA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 MediumMozillaThunderbirdSUSEAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 CriticalMozillaThunderbirdSUSEUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumMozillaThunderbirdSUSEPrototype pollution in matrix-js-sdk8.2 HighMozillaThunderbirdSUSEMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighMozillaThunderbirdSUSEDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumMozillaThunderbirdSUSEWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 MediumMozillaThunderbirdSUSEWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighMozillaThunderbirdSUSEWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumMozillaThunderbirdSUSESometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumMozillaThunderbirdSUSEMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 MediumMozillaThunderbirdSUSEAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 HighMozillaThunderbirdSUSEIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumMozillaThunderbirdSUSEMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighMozillaThunderbirdSUSEWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumMozillaThunderbirdSUSEModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighMozillaThunderbirdSUSEAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighMozillaThunderbirdSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaThunderbirdSUSEWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighMozillaThunderbirdSUSEA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumMozillaThunderbirdSUSEPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighMozillaThunderbirdSUSEThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumMozillaThunderbirdSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighMozillaThunderbirdSUSECertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighMozillaThunderbirdSUSECalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumMozillaThunderbirdSUSEContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumMozillaThunderbirdSUSEURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumMozillaThunderbirdSUSEMalicious command could be hidden in devtools output on Windows6.5 MediumMozillaThunderbirdSUSEArbitrary file read from GTK drag and drop on Linux6.5 MediumMozillaThunderbirdSUSEBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumMozillaThunderbirdSUSEAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighMozillaThunderbirdSUSEA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalMozillaThunderbirdSUSEAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 High- Show moreLoading…