thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 MediumthunderbirdUbuntuMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighthunderbirdUbuntuDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumthunderbirdUbuntuWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumthunderbirdUbuntuBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumthunderbirdUbuntuIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighthunderbirdUbuntuAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumthunderbirdUbuntu<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumthunderbirdUbuntuUse after free in Wasmtime8.1 HighthunderbirdUbuntuWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighthunderbirdUbuntuPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumthunderbirdUbuntuIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalthunderbirdUbuntuWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumthunderbirdUbuntuAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighthunderbirdUbuntuRegular expression denial of service in Rust's regex crate7.5 HighthunderbirdUbuntuIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.7.5 HighthunderbirdUbuntuIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalthunderbirdUbuntuIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...6.5 MediumthunderbirdUbuntuIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 HighthunderbirdUbuntuCranelift vulnerable to miscompilation of constant values in division on AArch645.9 MediumthunderbirdUbuntuxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalthunderbirdUbuntuxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalthunderbirdUbuntuMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdUbuntuWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighthunderbirdUbuntuWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighthunderbirdUbuntuWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumthunderbirdUbuntuIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalthunderbirdUbuntuIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighthunderbirdUbuntuIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumthunderbirdUbuntuImproper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils8.1 HighthunderbirdUbuntuExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.7.5 HighthunderbirdUbuntuExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...9.8 CriticalthunderbirdUbuntuMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighthunderbirdUbuntuMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumthunderbirdUbuntuAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumthunderbirdUbuntuSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumthunderbirdUbuntuWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumthunderbirdUbuntuWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumthunderbirdUbuntuWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighthunderbirdUbuntuCertain network request objects were freed too early when releasing a network request handle....8.8 HighthunderbirdUbuntuMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumthunderbirdUbuntuApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighthunderbirdUbuntuConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighthunderbirdUbuntuaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdUbuntubuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdUbuntudefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalthunderbirdUbuntulookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighthunderbirdUbuntunextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighthunderbirdUbuntustoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighthunderbirdUbuntuIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 Critical- Show moreLoading…