MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 MediumMozillaThunderbirdSUSEOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 MediumMozillaThunderbirdSUSEThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 HighMozillaThunderbirdSUSEIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 HighMozillaThunderbirdSUSEGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 HighMozillaThunderbirdSUSETo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LowMozillaThunderbirdSUSEAn attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system...5.9 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighMozillaThunderbirdSUSEIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighMozillaThunderbirdSUSEA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumMozillaThunderbirdSUSEUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumMozillaThunderbirdSUSEThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 MediumMozillaThunderbirdSUSE`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighMozillaThunderbirdSUSEReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighMozillaThunderbirdSUSEThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighMozillaThunderbirdSUSEIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighMozillaThunderbirdSUSESet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumMozillaThunderbirdSUSEA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumMozillaThunderbirdSUSEIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumMozillaThunderbirdSUSEA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumMozillaThunderbirdSUSEThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumMozillaThunderbirdSUSEWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighMozillaThunderbirdSUSEAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighMozillaThunderbirdSUSEIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumMozillaThunderbirdSUSEA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighMozillaThunderbirdSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaThunderbirdSUSEA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumMozillaThunderbirdSUSEWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumMozillaThunderbirdSUSEA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumMozillaThunderbirdSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaThunderbirdSUSEAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighMozillaThunderbirdSUSEThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighMozillaThunderbirdSUSEA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighMozillaThunderbirdSUSEThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighMozillaThunderbirdSUSEThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumMozillaThunderbirdSUSEA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighMozillaThunderbirdSUSEFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighMozillaThunderbirdSUSEWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumMozillaThunderbirdSUSEThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighMozillaThunderbirdSUSEThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 MediumMozillaThunderbirdSUSEWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighMozillaThunderbirdSUSERelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumMozillaThunderbirdSUSEWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighMozillaThunderbirdSUSEOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighMozillaThunderbirdSUSEThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumMozillaThunderbirdSUSEIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 Medium- Show moreLoading…