thunderbird vulnerabilities (TuxCare)
615 vulnerabilities.
thunderbirdTuxCareA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumthunderbirdTuxCareIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumthunderbirdTuxCareA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumthunderbirdTuxCareThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumthunderbirdTuxCareWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighthunderbirdTuxCareIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumthunderbirdTuxCareA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighthunderbirdTuxCareA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdTuxCareWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumthunderbirdTuxCareA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumthunderbirdTuxCareIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumthunderbirdTuxCareAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumthunderbirdTuxCareMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighthunderbirdTuxCareThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighthunderbirdTuxCareA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighthunderbirdTuxCareThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumthunderbirdTuxCareA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighthunderbirdTuxCareWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumthunderbirdTuxCareThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighthunderbirdTuxCareThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 MediumthunderbirdTuxCareWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 MediumthunderbirdTuxCareMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighthunderbirdTuxCareRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumthunderbirdTuxCareWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighthunderbirdTuxCareOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighthunderbirdTuxCareThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumthunderbirdTuxCareIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumthunderbirdTuxCareOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumthunderbirdTuxCareAddress bar spoofing via bidirectional characters6.5 MediumthunderbirdTuxCareA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumthunderbirdTuxCareDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighthunderbirdTuxCareNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumthunderbirdTuxCareDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumthunderbirdTuxCareA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumthunderbirdTuxCareXLL file extensions were downloadable without warnings4.3 MediumthunderbirdTuxCarePush notifications saved to disk unencrypted6.5 MediumthunderbirdTuxCareError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumthunderbirdTuxCareMemory corruption in JIT UpdateRegExpStatics6.5 MediumthunderbirdTuxCareMemory corruption in IPC FilePickerShownCallback6.5 MediumthunderbirdTuxCareMemory corruption in IPC ColorPickerShownCallback6.5 MediumthunderbirdTuxCareMemory corruption in IPC CanvasTranslator6.5 MediumthunderbirdTuxCareA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumthunderbirdTuxCareA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdTuxCareAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdTuxCareOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdTuxCareA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdTuxCareWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdTuxCareAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdTuxCareFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdTuxCareA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Medium- Show moreLoading…