thunderbird vulnerabilities (Ubuntu)
1,962 vulnerabilities.
thunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighthunderbirdUbuntuPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdUbuntuAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumthunderbirdUbuntuSome non-writable Object properties could be modified6.5 MediumthunderbirdUbuntuCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdUbuntuOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdUbuntuUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdUbuntuMitigation bypass in the Web Compatibility: Tooling component5.4 MediumthunderbirdUbuntuSpoofing issue in the WebAuthn component in Firefox for Android6.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdUbuntuInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdUbuntuInteger overflow in the SVG component8.8 HighthunderbirdUbuntuIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdUbuntuSame-origin policy bypass in the Layout component6.5 MediumthunderbirdUbuntuSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdUbuntuSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdUbuntuDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdUbuntuUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdUbuntuSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdUbuntuSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdUbuntuSearch terms persisted in URL bar8.1 HighthunderbirdUbuntuMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdUbuntuIncorrect JavaScript state machine for generators6.5 MediumthunderbirdUbuntuCSP frame-src was not correctly enforced for paths9.8 CriticalthunderbirdUbuntuXSLT documents could bypass CSP8.1 HighthunderbirdUbuntuIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdUbuntuNameless cookies shadow secure cookies9.1 CriticalthunderbirdUbuntuDNS rebinding circumvents CORS8.1 HighthunderbirdUbuntuPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdUbuntujavascript: URLs executed on object and embed tags8.1 HighthunderbirdUbuntuLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdUbuntuJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdUbuntuMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighthunderbirdUbuntuSave as in Devtools could download files without sanitizing the extension8.1 HighthunderbirdUbuntuHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumthunderbirdUbuntuWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalthunderbirdUbuntuDNS Requests leaked outside of a configured SOCKS proxy8.6 HighthunderbirdUbuntuContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdUbuntuconnect-src Content Security Policy restriction could be bypassed9.1 CriticalthunderbirdUbuntuIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdUbuntuNo warning when opening executable terminal files on macOS8.8 HighthunderbirdUbuntuThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdUbuntuUse-after-free in FontFaceSet9.8 CriticalthunderbirdUbuntuUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdUbuntuUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Medium- Show moreLoading…