thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuMemory safety bugs fixed in Firefox 139 and Thunderbird 1397.3 HighthunderbirdUbuntuDevtools' preview ignored CSP headers6.5 MediumthunderbirdUbuntuSNI was sometimes unencrypted7.5 HighthunderbirdUbuntuMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdUbuntuClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdUbuntuScript element events leaked cross-origin resource status4.3 MediumthunderbirdUbuntuPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdUbuntuPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdUbuntuError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdUbuntuOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdUbuntuOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdUbuntuTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdUbuntuJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdUbuntuSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdUbuntuMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox 138 and Thunderbird 1386.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdUbuntuPotential local code execution in "copy as cURL" command5.1 MediumthunderbirdUbuntuCross-site request forgery via storage access API redirects6.5 MediumthunderbirdUbuntuUnsafe attribute access during XPath parsing4.8 MediumthunderbirdUbuntuPotential information leakage and privilege escalation in UITour actor7.1 HighthunderbirdUbuntuProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdUbuntuUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdUbuntuLeak of hashed Window credentials via crafted attachment URL6.3 MediumthunderbirdUbuntuInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 137 and Thunderbird 1378.1 HighthunderbirdUbuntuLeaking file descriptors from the fork server7.4 HighthunderbirdUbuntuJIT optimization bug with different stack slot sizes6.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdUbuntuURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdUbuntuUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdUbuntuCrafted email message incorrectly shown as being encrypted7.0 HighthunderbirdUbuntuDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 136 and Thunderbird 1368.2 HighthunderbirdUbuntuDisclosure of uninitialized memory when .toUpperCase() causes string to get longer9.8 CriticalthunderbirdUbuntuMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdUbuntuAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighthunderbirdUbuntuClickjacking the registerProtocolHandler info-bar4.3 MediumthunderbirdUbuntuUnexpected GC during RegExp bailout processing6.5 MediumthunderbirdUbuntuJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighthunderbirdUbuntuInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighthunderbirdUbuntuUse-after-free in WebTransportChild7.5 HighthunderbirdUbuntuAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox 135 and Thunderbird 1359.8 CriticalthunderbirdUbuntuUnsanitized address book fields5.4 MediumthunderbirdUbuntuAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdUbuntuFullscreen notification not properly displayed4.3 MediumthunderbirdUbuntuFullscreen notification is not displayed when fullscreen is re-requested5.3 Medium- Show moreLoading…