thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumthunderbirdUbuntuWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumthunderbirdUbuntuWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighthunderbirdUbuntuIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumthunderbirdUbuntuIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighthunderbirdUbuntuWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdUbuntuDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighthunderbirdUbuntuWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumthunderbirdUbuntuthunderbird regressionNo scorethunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighthunderbirdUbuntuUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighthunderbirdUbuntuUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighthunderbirdUbuntuWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighthunderbirdUbuntuThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighthunderbirdUbuntuWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighthunderbirdUbuntuFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumthunderbirdUbuntuIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumthunderbirdUbuntuBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumthunderbirdUbuntuA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighthunderbirdUbuntuAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighthunderbirdUbuntuWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighthunderbirdUbuntuA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 HighthunderbirdUbuntuEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumthunderbirdUbuntuIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighthunderbirdUbuntuIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighthunderbirdUbuntuA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighthunderbirdUbuntuSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumthunderbirdUbuntuNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowthunderbirdUbuntuA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighthunderbirdUbuntuAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighthunderbirdUbuntuA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumthunderbirdUbuntuEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighthunderbirdUbuntuA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumthunderbirdUbuntuWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighthunderbirdUbuntuA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumthunderbirdUbuntuDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumthunderbirdUbuntuA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalthunderbirdUbuntuPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighthunderbirdUbuntuWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalthunderbirdUbuntuInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalthunderbirdUbuntuA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighthunderbirdUbuntuA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighthunderbirdUbuntuA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalthunderbirdUbuntuA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalthunderbirdUbuntuA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Critical- Show moreLoading…