thunderbird vulnerabilities (TuxCare)
615 vulnerabilities.
thunderbirdTuxCareInteger overflow in the SVG component8.8 HighthunderbirdTuxCareIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdTuxCareSame-origin policy bypass in the Layout component6.5 MediumthunderbirdTuxCareSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdTuxCareSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdTuxCareMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdTuxCareDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighthunderbirdTuxCareMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdTuxCareUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdTuxCareSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdTuxCareSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdTuxCareMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdTuxCareMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdTuxCareIncorrect JavaScript state machine for generators6.5 MediumthunderbirdTuxCareXSLT documents could bypass CSP8.1 HighthunderbirdTuxCareIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdTuxCareNameless cookies shadow secure cookies9.1 CriticalthunderbirdTuxCareDNS rebinding circumvents CORS8.1 HighthunderbirdTuxCarePotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdTuxCarejavascript: URLs executed on object and embed tags8.1 HighthunderbirdTuxCareLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdTuxCareJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdTuxCareUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdTuxCareMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdTuxCareA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 HighthunderbirdTuxCareTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdTuxCareJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdTuxCareUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdTuxCareInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdTuxCareOpening local .url files could lead to another file being opened7.7 HighthunderbirdTuxCareLeaking file descriptors from the fork server7.4 HighthunderbirdTuxCareJIT optimization bug with different stack slot sizes6.5 MediumthunderbirdTuxCareMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdTuxCareURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdTuxCareUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdTuxCareCrafted email message incorrectly shown as being encrypted7.0 HighthunderbirdTuxCareDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdTuxCareDisclosure of uninitialized memory when .toUpperCase() causes string to get longer9.8 CriticalthunderbirdTuxCareMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdTuxCareMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdTuxCareAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighthunderbirdTuxCareClickjacking the registerProtocolHandler info-bar4.3 MediumthunderbirdTuxCareUnexpected GC during RegExp bailout processing6.5 MediumthunderbirdTuxCareJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighthunderbirdTuxCareInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighthunderbirdTuxCareUse-after-free in WebTransportChild7.5 HighthunderbirdTuxCareUnsanitized address book fields5.4 MediumthunderbirdTuxCareAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdTuxCareFullscreen notification not properly displayed4.3 MediumthunderbirdTuxCareFullscreen notification is not displayed when fullscreen is re-requested5.3 Medium- Show moreLoading…