thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumthunderbirdUbuntuBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumthunderbirdUbuntuWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumthunderbirdUbuntuWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumthunderbirdUbuntulibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighthunderbirdUbuntuPrototype pollution in matrix-js-sdk8.2 HighthunderbirdUbuntuWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumthunderbirdUbuntuIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighthunderbirdUbuntuWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumthunderbirdUbuntuMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighthunderbirdUbuntuMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdUbuntuA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighthunderbirdUbuntuAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 MediumthunderbirdUbuntuA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighthunderbirdUbuntuAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumthunderbirdUbuntuMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighthunderbirdUbuntuMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...9.8 CriticalthunderbirdUbuntuWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighthunderbirdUbuntuWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumthunderbirdUbuntuWhen using the Performance API, an attacker was able to notice subtle differences between...6.1 MediumthunderbirdUbuntuWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 MediumthunderbirdUbuntuUse After Free in Wasmtime6.4 MediumthunderbirdUbuntuWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighthunderbirdUbuntuAn OpenPGP digital signature includes information about the date when the signature was created....6.5 MediumthunderbirdUbuntuThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighthunderbirdUbuntuIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighthunderbirdUbuntuA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumthunderbirdUbuntuIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumthunderbirdUbuntuSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalthunderbirdUbuntuAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighthunderbirdUbuntuIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighthunderbirdUbuntuMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 CriticalthunderbirdUbuntuAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumthunderbirdUbuntuAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumthunderbirdUbuntuA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighthunderbirdUbuntuOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighthunderbirdUbuntuWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumthunderbirdUbuntuA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalthunderbirdUbuntuA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalthunderbirdUbuntuWhen displaying the sender of an email, and the sender name contained the Braille Pattern Blank...6.5 MediumthunderbirdUbuntuIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighthunderbirdUbuntuAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighthunderbirdUbuntuThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 MediumthunderbirdUbuntuWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 MediumthunderbirdUbuntuMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalthunderbirdUbuntuFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumthunderbirdUbuntuWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumthunderbirdUbuntuRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumthunderbirdUbuntuAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumthunderbirdUbuntuDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 High- Show moreLoading…