thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 HighthunderbirdUbuntuWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighthunderbirdUbuntuBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumthunderbirdUbuntuUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 MediumthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighthunderbirdUbuntuThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumthunderbirdUbuntuJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighthunderbirdUbuntuA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumthunderbirdUbuntuWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumthunderbirdUbuntuAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumthunderbirdUbuntuBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumthunderbirdUbuntuInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumthunderbirdUbuntuIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...5.9 MediumthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighthunderbirdUbuntuDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumthunderbirdUbuntuWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumthunderbirdUbuntuIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighthunderbirdUbuntuWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumthunderbirdUbuntuWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighthunderbirdUbuntuWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighthunderbirdUbuntuManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumthunderbirdUbuntuDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighthunderbirdUbuntuA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighthunderbirdUbuntuWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumthunderbirdUbuntuIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighthunderbirdUbuntuMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighthunderbirdUbuntuWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumthunderbirdUbuntuNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumthunderbirdUbuntuUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighthunderbirdUbuntuBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumthunderbirdUbuntuA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalthunderbirdUbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumthunderbirdUbuntuA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighthunderbirdUbuntuMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalthunderbirdUbuntuOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighthunderbirdUbuntuWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighthunderbirdUbuntuUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighthunderbirdUbuntuUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalthunderbirdUbuntuThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumthunderbirdUbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighthunderbirdUbuntuWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighthunderbirdUbuntuBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighthunderbirdUbuntuWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighthunderbirdUbuntuusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumthunderbirdUbuntuWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 Medium- Show moreLoading…