thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighthunderbirdUbuntuIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighthunderbirdUbuntuInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalthunderbirdUbuntuType Confusion in Async Generators in Javascript Engine7.5 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighthunderbirdUbuntuMemory corruption in thread creation7.4 HighthunderbirdUbuntuMemory corruption in NSS9.8 CriticalthunderbirdUbuntuRace condition in permission assignment4.7 MediumthunderbirdUbuntuMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighthunderbirdUbuntuMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighthunderbirdUbuntuBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighthunderbirdUbuntuOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumthunderbirdUbuntuBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumthunderbirdUbuntuBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumthunderbirdUbuntuIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighthunderbirdUbuntuMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighthunderbirdUbuntuWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighthunderbirdUbuntuWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumthunderbirdUbuntuA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumthunderbirdUbuntuIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumthunderbirdUbuntuPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighthunderbirdUbuntuMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighthunderbirdUbuntuThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowthunderbirdUbuntuIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 MediumthunderbirdUbuntuOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 MediumthunderbirdUbuntuThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 HighthunderbirdUbuntuIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 HighthunderbirdUbuntuGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 HighthunderbirdUbuntuTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LowthunderbirdUbuntuMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighthunderbirdUbuntuIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighthunderbirdUbuntuA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumthunderbirdUbuntuUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumthunderbirdUbuntuThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 MediumthunderbirdUbuntu`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighthunderbirdUbuntuReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighthunderbirdUbuntuThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 HighthunderbirdUbuntuMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighthunderbirdUbuntuIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighthunderbirdUbuntuSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumthunderbirdUbuntuA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumthunderbirdUbuntuIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumthunderbirdUbuntuA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumthunderbirdUbuntuThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumthunderbirdUbuntuWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighthunderbirdUbuntuAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighthunderbirdUbuntuMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighthunderbirdUbuntuIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumthunderbirdUbuntuA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighthunderbirdUbuntuA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 High- Show moreLoading…