thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumthunderbirdUbuntuAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighthunderbirdUbuntuCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighthunderbirdUbuntuCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumthunderbirdUbuntuContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumthunderbirdUbuntuURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumthunderbirdUbuntuMalicious command could be hidden in devtools output on Windows6.5 MediumthunderbirdUbuntuArbitrary file read from GTK drag and drop on Linux6.5 MediumthunderbirdUbuntuBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumthunderbirdUbuntuAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighthunderbirdUbuntuA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalthunderbirdUbuntuAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighthunderbirdUbuntuA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumthunderbirdUbuntuMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighthunderbirdUbuntuA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighthunderbirdUbuntuAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighthunderbirdUbuntuIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighthunderbirdUbuntuMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighthunderbirdUbuntuUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumthunderbirdUbuntuIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumthunderbirdUbuntuKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumthunderbirdUbuntuWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighthunderbirdUbuntuCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumthunderbirdUbuntuWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumthunderbirdUbuntuThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighthunderbirdUbuntuThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumthunderbirdUbuntuIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalthunderbirdUbuntuFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumthunderbirdUbuntuThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumthunderbirdUbuntuService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumthunderbirdUbuntuwasmtime_trap_code C API function has out of bounds write vulnerability3.8 LowthunderbirdUbuntuWasmtime vulnerable to data leakage between instances in the pooling allocator8.6 HighthunderbirdUbuntuWasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration5.9 MediumthunderbirdUbuntuLogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 LowthunderbirdUbuntuIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 HighthunderbirdUbuntuIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...7.5 HighthunderbirdUbuntuMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighthunderbirdUbuntuIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumthunderbirdUbuntuCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighthunderbirdUbuntuA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighthunderbirdUbuntuPrototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in...9.8 CriticalthunderbirdUbuntuMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighthunderbirdUbuntuMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighthunderbirdUbuntuMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighthunderbirdUbuntuMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumthunderbirdUbuntuInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumthunderbirdUbuntuAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 MediumthunderbirdUbuntuMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighthunderbirdUbuntuConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 Medium- Show moreLoading…