thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighthunderbirdUbuntuWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 MediumthunderbirdUbuntuIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighthunderbirdUbuntuRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumthunderbirdUbuntuAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighthunderbirdUbuntuA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighthunderbirdUbuntuIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumthunderbirdUbuntuOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumthunderbirdUbuntuFile Extension Spoofing using the Text Direction Override Character7.5 HighthunderbirdUbuntuUse-after-free in workers8.8 HighthunderbirdUbuntuMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighthunderbirdUbuntuWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighthunderbirdUbuntuA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumthunderbirdUbuntuCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdUbuntuAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighthunderbirdUbuntuMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalthunderbirdUbuntuThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowthunderbirdUbuntuMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighthunderbirdUbuntuWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighthunderbirdUbuntuAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumthunderbirdUbuntuA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumthunderbirdUbuntuA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighthunderbirdUbuntuAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumthunderbirdUbuntuIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumthunderbirdUbuntuRibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumthunderbirdUbuntuUse after free in libwebp5.3 MediumthunderbirdUbuntuOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumthunderbirdUbuntuMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighthunderbirdUbuntuA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumthunderbirdUbuntuFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighthunderbirdUbuntuWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighthunderbirdUbuntuAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighthunderbirdUbuntuFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumthunderbirdUbuntuA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumthunderbirdUbuntuUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumthunderbirdUbuntuMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighthunderbirdUbuntuDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumthunderbirdUbuntuWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighthunderbirdUbuntuWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumthunderbirdUbuntuSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumthunderbirdUbuntuA flaw was found in libpng 1.6.38. A crafted PNG image can lead to a segmentation fault and...5.5 MediumthunderbirdUbuntuIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumthunderbirdUbuntuMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighthunderbirdUbuntuWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumthunderbirdUbuntuModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighthunderbirdUbuntuAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighthunderbirdUbuntuCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighthunderbirdUbuntuWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighthunderbirdUbuntuA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumthunderbirdUbuntuPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 High- Show moreLoading…