thunderbird vulnerabilities (TuxCare)
615 vulnerabilities.
thunderbirdTuxCareMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdTuxCareCertificate length was not properly checked8.8 HighthunderbirdTuxCarePotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdTuxCareUse-after-free during concurrent delazification7.5 HighthunderbirdTuxCareUse-after-free in Custom Highlight8.8 HighthunderbirdTuxCareUse-after-free in XSLT9.8 CriticalthunderbirdTuxCareMemory safety bugs fixed in Firefox 134 and Thunderbird 1349.8 CriticalthunderbirdTuxCareMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdTuxCareMemory corruption when using JavaScript Text Segmentation7.7 HighthunderbirdTuxCareCompartment mismatch when parsing JavaScript JSON module4.0 MediumthunderbirdTuxCareAlt-Svc ALPN validation failure when redirected4.0 MediumthunderbirdTuxCareUse-after-free when breaking lines in text5.3 MediumthunderbirdTuxCareWebChannel APIs susceptible to confused deputy attack5.4 MediumthunderbirdTuxCareMissing thread synchronization primitives could have led to a data race on members of the...6.5 MediumthunderbirdTuxCareA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the...6.5 MediumthunderbirdTuxCare`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was...9.1 CriticalthunderbirdTuxCareA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalthunderbirdTuxCareWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighthunderbirdTuxCareThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumthunderbirdTuxCareA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumthunderbirdTuxCareCopying sensitive information from Private Browsing tabs on Android, such as passwords, may have...7.5 HighthunderbirdTuxCareEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumthunderbirdTuxCareThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 CriticalthunderbirdTuxCareThe incorrect domain may have been displayed in the address bar during an interrupted navigation...4.3 MediumthunderbirdTuxCareMalicious websites may have been able to user intent confirmation through tapjacking. This could...8.1 HighthunderbirdTuxCareAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumthunderbirdTuxCareUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 MediumthunderbirdTuxCareMicrosoft Exchange Server Spoofing Vulnerability7.5 HighthunderbirdTuxCarePotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 MediumthunderbirdTuxCareMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighthunderbirdTuxCareBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighthunderbirdTuxCareA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumthunderbirdTuxCareRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumthunderbirdTuxCareVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumthunderbirdTuxCareTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumthunderbirdTuxCareIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumthunderbirdTuxCareThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumthunderbirdTuxCareAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighthunderbirdTuxCareA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighthunderbirdTuxCareMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalthunderbirdTuxCareA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighthunderbirdTuxCareA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighthunderbirdTuxCareBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumthunderbirdTuxCareA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumthunderbirdTuxCareIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighthunderbirdTuxCareAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdTuxCareAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighthunderbirdTuxCareA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalthunderbirdTuxCareWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 MediumthunderbirdTuxCareThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Medium- Show moreLoading…