thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 MediumthunderbirdUbuntuThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalthunderbirdUbuntuThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumthunderbirdUbuntuMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalthunderbirdUbuntuIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumthunderbirdUbuntuUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumthunderbirdUbuntuDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumthunderbirdUbuntuUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumthunderbirdUbuntuWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumthunderbirdUbuntuFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighthunderbirdUbuntuBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumthunderbirdUbuntuAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighthunderbirdUbuntuUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumthunderbirdUbuntuNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...9.8 CriticalthunderbirdUbuntuThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...9.8 CriticalthunderbirdUbuntuA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighthunderbirdUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighthunderbirdUbuntuDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumthunderbirdUbuntuBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumthunderbirdUbuntuThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumthunderbirdUbuntuThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumthunderbirdUbuntuWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighthunderbirdUbuntuThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalthunderbirdUbuntuThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdUbuntuDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighthunderbirdUbuntuThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighthunderbirdUbuntuDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighthunderbirdUbuntuFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighthunderbirdUbuntuFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighthunderbirdUbuntuAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumthunderbirdUbuntuA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighthunderbirdUbuntuA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighthunderbirdUbuntuInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighthunderbirdUbuntuDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumthunderbirdUbuntuAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighthunderbirdUbuntuUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighthunderbirdUbuntuIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumthunderbirdUbuntuMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighthunderbirdUbuntuA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighthunderbirdUbuntuOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighthunderbirdUbuntuMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighthunderbirdUbuntuIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumthunderbirdUbuntuOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumthunderbirdUbuntuWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 HighthunderbirdUbuntuSignatures are written to disk before and read during verification, which might be subject to a...2.5 Low- Show moreLoading…