MozillaThunderbird vulnerabilities (SUSE)
1,376 vulnerabilities.
MozillaThunderbirdSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumMozillaThunderbirdSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalMozillaThunderbirdSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaThunderbirdSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaThunderbirdSUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaThunderbirdSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaThunderbirdSUSENo warning when opening executable terminal files on macOS8.8 HighMozillaThunderbirdSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaThunderbirdSUSEUse-after-free in FontFaceSet9.8 CriticalMozillaThunderbirdSUSEUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumMozillaThunderbirdSUSEMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighMozillaThunderbirdSUSEClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumMozillaThunderbirdSUSEScript element events leaked cross-origin resource status4.3 MediumMozillaThunderbirdSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaThunderbirdSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaThunderbirdSUSEError handling for script execution was incorrectly isolated from web content4.3 MediumMozillaThunderbirdSUSEA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 HighMozillaThunderbirdSUSEOut-of-bounds access when optimizing linear sums8.8 HighMozillaThunderbirdSUSEOut-of-bounds access when resolving Promise objects9.8 CriticalMozillaThunderbirdSUSETracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumMozillaThunderbirdSUSEJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighMozillaThunderbirdSUSEA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighMozillaThunderbirdSUSESender Spoofing via Malformed From Header in Thunderbird7.5 HighMozillaThunderbirdSUSEMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighMozillaThunderbirdSUSEUnsafe attribute access during XPath parsing4.8 MediumMozillaThunderbirdSUSEPotential local code execution in "copy as cURL" command5.7 MediumMozillaThunderbirdSUSEProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalMozillaThunderbirdSUSEWebGL shader attribute memory corruption in Thunderbird for macOS5.9 MediumMozillaThunderbirdSUSEPrivilege escalation in Thunderbird Updater8.8 HighMozillaThunderbirdSUSEUser Interface (UI) Misrepresentation of attachment URL6.4 MediumMozillaThunderbirdSUSELeak of hashed Window credentials via crafted attachment URL6.3 MediumMozillaThunderbirdSUSEInformation Disclosure of /tmp directory listing6.3 MediumMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighMozillaThunderbirdSUSEURL Bar Spoofing via non-BMP Unicode characters7.3 HighMozillaThunderbirdSUSEUse-after-free triggered by XSLTProcessor6.5 MediumMozillaThunderbirdSUSECrafted email message incorrectly shown as being encrypted7.0 HighMozillaThunderbirdSUSEDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumMozillaThunderbirdSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighMozillaThunderbirdSUSEAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighMozillaThunderbirdSUSEClickjacking the registerProtocolHandler info-bar4.3 MediumMozillaThunderbirdSUSEUnexpected GC during RegExp bailout processing6.5 MediumMozillaThunderbirdSUSEJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighMozillaThunderbirdSUSEInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighMozillaThunderbirdSUSEUse-after-free in WebTransportChild7.5 HighMozillaThunderbirdSUSEAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighMozillaThunderbirdSUSEUnsanitized address book fields5.4 MediumMozillaThunderbirdSUSEAddress of e-mail sender can be spoofed by malicious email6.5 Medium- Show moreLoading…