thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighthunderbirdUbuntuThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumthunderbirdUbuntuWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighthunderbirdUbuntuIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighthunderbirdUbuntuThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumthunderbirdUbuntuWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighthunderbirdUbuntuA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighthunderbirdUbuntuAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 MediumthunderbirdUbuntuThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumthunderbirdUbuntuIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 MediumthunderbirdUbuntuThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 HighthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighthunderbirdUbuntuA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumthunderbirdUbuntuUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumthunderbirdUbuntuA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighthunderbirdUbuntuWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumthunderbirdUbuntuAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumthunderbirdUbuntuIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighthunderbirdUbuntuFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighthunderbirdUbuntuPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighthunderbirdUbuntuUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighthunderbirdUbuntuIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumthunderbirdUbuntuUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighthunderbirdUbuntuDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighthunderbirdUbuntuWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumthunderbirdUbuntuUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumthunderbirdUbuntuWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumthunderbirdUbuntuWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighthunderbirdUbuntuCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighthunderbirdUbuntuCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighthunderbirdUbuntuUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumthunderbirdUbuntuWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighthunderbirdUbuntuSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumthunderbirdUbuntuWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumthunderbirdUbuntuIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighthunderbirdUbuntuDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighthunderbirdUbuntuFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumthunderbirdUbuntuIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumthunderbirdUbuntuIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumthunderbirdUbuntuA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumthunderbirdUbuntuSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumthunderbirdUbuntuIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalthunderbirdUbuntuUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighthunderbirdUbuntuWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighthunderbirdUbuntuBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Medium- Show moreLoading…