thunderbird vulnerabilities (openEuler)
466 vulnerabilities.
thunderbirdopenEulerInformation Disclosure of /tmp directory listing6.3 MediumthunderbirdopenEulerMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighthunderbirdopenEulerURL Bar Spoofing via non-BMP Unicode characters7.3 HighthunderbirdopenEulerUse-after-free triggered by XSLTProcessor6.5 MediumthunderbirdopenEulerDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumthunderbirdopenEulerMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumthunderbirdopenEulerMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighthunderbirdopenEulerAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighthunderbirdopenEulerClickjacking the registerProtocolHandler info-bar4.3 MediumthunderbirdopenEulerUnexpected GC during RegExp bailout processing6.5 MediumthunderbirdopenEulerJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighthunderbirdopenEulerInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighthunderbirdopenEulerUse-after-free in WebTransportChild7.5 HighthunderbirdopenEulerAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighthunderbirdopenEulerUnsanitized address book fields5.4 MediumthunderbirdopenEulerAddress of e-mail sender can be spoofed by malicious email6.5 MediumthunderbirdopenEulerMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalthunderbirdopenEulerMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalthunderbirdopenEulerCertificate length was not properly checked8.8 HighthunderbirdopenEulerPotential opening of private browsing tabs in normal browsing windows6.5 MediumthunderbirdopenEulerUse-after-free during concurrent delazification7.5 HighthunderbirdopenEulerA bug in WebAssembly code generation could result in a crash8.8 HighthunderbirdopenEulerUse-after-free in Custom Highlight8.8 HighthunderbirdopenEulerUse-after-free in XSLT9.8 CriticalthunderbirdopenEulerMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumthunderbirdopenEulerMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumthunderbirdopenEulerMemory corruption when using JavaScript Text Segmentation7.7 HighthunderbirdopenEulerCompartment mismatch when parsing JavaScript JSON module4.0 MediumthunderbirdopenEulerAlt-Svc ALPN validation failure when redirected4.0 MediumthunderbirdopenEulerUse-after-free when breaking lines in text5.3 MediumthunderbirdopenEulerWebChannel APIs susceptible to confused deputy attack5.4 MediumthunderbirdopenEulerIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighthunderbirdopenEulerMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighthunderbirdopenEulerA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 CriticalthunderbirdopenEulerA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalthunderbirdopenEulerWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighthunderbirdopenEulerThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumthunderbirdopenEulerA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumthunderbirdopenEulerEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumthunderbirdopenEulerThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 CriticalthunderbirdopenEulerAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumthunderbirdopenEulerAn attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be...8.8 HighthunderbirdopenEulerUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 MediumthunderbirdopenEulermatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3 MediumthunderbirdopenEulerMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighthunderbirdopenEulerBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighthunderbirdopenEulerA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumthunderbirdopenEulerRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumthunderbirdopenEulerVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumthunderbirdopenEulerTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Medium- Show moreLoading…