MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumMozillaThunderbirdSUSEAddress bar spoofing via bidirectional characters6.5 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalMozillaThunderbirdSUSEDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighMozillaThunderbirdSUSEThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...6.5 MediumMozillaThunderbirdSUSEA website could have obscured the full screen notification by using the file open dialog. This...4.3 MediumMozillaThunderbirdSUSEA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumMozillaThunderbirdSUSEDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighMozillaThunderbirdSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaThunderbirdSUSENSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumMozillaThunderbirdSUSEElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalMozillaThunderbirdSUSEIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 CriticalMozillaThunderbirdSUSEDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumMozillaThunderbirdSUSEA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumMozillaThunderbirdSUSEA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...9.8 CriticalMozillaThunderbirdSUSEDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighMozillaThunderbirdSUSEBuffer Overflow in WebGL glGetProgramiv8.8 HighMozillaThunderbirdSUSEInteger Overflow in RecordedSourceSurfaceCreation8.6 HighMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighMozillaThunderbirdSUSEBrowsing Context potentially not cleared when closing Private Window7.5 HighMozillaThunderbirdSUSEXLL file extensions were downloadable without warnings4.3 MediumMozillaThunderbirdSUSEPush notifications saved to disk unencrypted6.5 MediumMozillaThunderbirdSUSEError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumMozillaThunderbirdSUSEMemory corruption in JIT UpdateRegExpStatics6.5 MediumMozillaThunderbirdSUSEMemory corruption in IPC FilePickerShownCallback6.5 MediumMozillaThunderbirdSUSEMemory corruption in IPC ColorPickerShownCallback6.5 MediumMozillaThunderbirdSUSEMemory corruption in IPC CanvasTranslator6.5 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalMozillaThunderbirdSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalMozillaThunderbirdSUSEWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighMozillaThunderbirdSUSEWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 MediumMozillaThunderbirdSUSEThe Firefox updater created a directory writable by non-privileged users. When uninstalling...6.5 MediumMozillaThunderbirdSUSEFull screen notification obscured by external program6.5 MediumMozillaThunderbirdSUSEFull screen notification obscured by file open dialog7.5 HighMozillaThunderbirdSUSEIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighMozillaThunderbirdSUSERace conditions in reference counting code were found through code inspection. These could have...5.9 MediumMozillaThunderbirdSUSEAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighMozillaThunderbirdSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaThunderbirdSUSEIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumMozillaThunderbirdSUSEOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumMozillaThunderbirdSUSEFile Extension Spoofing using the Text Direction Override Character7.5 HighMozillaThunderbirdSUSEUse-after-free in workers8.8 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalMozillaThunderbirdSUSEThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowMozillaThunderbirdSUSEProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 HighMozillaThunderbirdSUSEMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighMozillaThunderbirdSUSEWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighMozillaThunderbirdSUSEAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Medium- Show moreLoading…