MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 MediumMozillaThunderbirdSUSEMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalMozillaThunderbirdSUSEIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumMozillaThunderbirdSUSEA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalMozillaThunderbirdSUSEThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalMozillaThunderbirdSUSEInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighMozillaThunderbirdSUSEA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalMozillaThunderbirdSUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumMozillaThunderbirdSUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighMozillaThunderbirdSUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighMozillaThunderbirdSUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumMozillaThunderbirdSUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighMozillaThunderbirdSUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighMozillaThunderbirdSUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighMozillaThunderbirdSUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighMozillaThunderbirdSUSEInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalMozillaThunderbirdSUSESelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 HighMozillaThunderbirdSUSEIncorrect listing of stack frames4.3 MediumMozillaThunderbirdSUSEIncorrect listing of stack frames5.5 MediumMozillaThunderbirdSUSECSP violation leakage when using devtools5.3 MediumMozillaThunderbirdSUSEIncorrect handling of SameSite cookies9.8 CriticalMozillaThunderbirdSUSEForm validation popups could block exiting full-screen mode4.3 MediumMozillaThunderbirdSUSEMemory corruption in NSS8.8 HighMozillaThunderbirdSUSECursor could be moved out of the viewport using pointerlock.4.3 MediumMozillaThunderbirdSUSELeaving pointerlock by pressing the escape key could be prevented8.8 HighMozillaThunderbirdSUSEOut-of-bounds read in clipboard component8.2 HighMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighMozillaThunderbirdSUSEMemory corruption in thread creation7.4 HighMozillaThunderbirdSUSEMemory corruption in NSS9.8 CriticalMozillaThunderbirdSUSERace condition in permission assignment4.7 MediumMozillaThunderbirdSUSEMemory corruption in WebGL API6.3 MediumMozillaThunderbirdSUSEBotan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters7.5 HighMozillaThunderbirdSUSEOn Windows, when using the 'Save As' functionality, an attacker could have tricked the browser...6.5 MediumMozillaThunderbirdSUSEMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighMozillaThunderbirdSUSEBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighMozillaThunderbirdSUSEOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumMozillaThunderbirdSUSEBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumMozillaThunderbirdSUSEBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumMozillaThunderbirdSUSEIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighMozillaThunderbirdSUSEMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighMozillaThunderbirdSUSEWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighMozillaThunderbirdSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumMozillaThunderbirdSUSEA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumMozillaThunderbirdSUSEIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumMozillaThunderbirdSUSEPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighMozillaThunderbirdSUSEMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighMozillaThunderbirdSUSEThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowMozillaThunderbirdSUSEThe executable file warning was not presented when downloading .xrm-ms files. *Note: This issue...9.8 Critical- Show moreLoading…