thunderbird vulnerabilities (openEuler)
466 vulnerabilities.
thunderbirdopenEulerCross-process information leaked due to malicious IPC messages9.8 CriticalthunderbirdopenEulerOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalthunderbirdopenEulerUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalthunderbirdopenEulerMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighthunderbirdopenEulerInformation disclosure in the Networking: Cache component6.2 MediumthunderbirdopenEulerInteger overflow in the SVG component8.8 HighthunderbirdopenEulerIncorrect boundary conditions in the JavaScript: GC component6.5 MediumthunderbirdopenEulerSame-origin policy bypass in the Layout component6.5 MediumthunderbirdopenEulerSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighthunderbirdopenEulerSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighthunderbirdopenEulerlibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighthunderbirdopenEulerMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighthunderbirdopenEulerUninitialized memory in the JavaScript Engine component6.5 MediumthunderbirdopenEulerSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighthunderbirdopenEulerSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalthunderbirdopenEulerMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdopenEulerMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighthunderbirdopenEulerIncorrect JavaScript state machine for generators6.5 MediumthunderbirdopenEulerXSLT documents could bypass CSP8.1 HighthunderbirdopenEulerIncorrect URL stripping in CSP reports9.8 CriticalthunderbirdopenEulerPotential user-assisted code execution in “Copy as cURL” command8.1 HighthunderbirdopenEulerjavascript: URLs executed on object and embed tags8.1 HighthunderbirdopenEulerLarge branch table could lead to truncated instruction9.8 CriticalthunderbirdopenEulerJavaScript engine only wrote partial return value to stack6.5 MediumthunderbirdopenEulerContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumthunderbirdopenEulerIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumthunderbirdopenEulerThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumthunderbirdopenEulerUse-after-free in FontFaceSet9.8 CriticalthunderbirdopenEulerUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumthunderbirdopenEulerMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighthunderbirdopenEulerMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighthunderbirdopenEulerClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumthunderbirdopenEulerScript element events leaked cross-origin resource status4.3 MediumthunderbirdopenEulerPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdopenEulerPotential local code execution in “Copy as cURL” command4.8 MediumthunderbirdopenEulerError handling for script execution was incorrectly isolated from web content4.3 MediumthunderbirdopenEulerOut-of-bounds access when optimizing linear sums8.8 HighthunderbirdopenEulerOut-of-bounds access when resolving Promise objects9.8 CriticalthunderbirdopenEulerTracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumthunderbirdopenEulerJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighthunderbirdopenEulerSender Spoofing via Malformed From Header in Thunderbird7.5 HighthunderbirdopenEulerMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighthunderbirdopenEulerMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighthunderbirdopenEulerUnsafe attribute access during XPath parsing4.8 MediumthunderbirdopenEulerPotential local code execution in "copy as cURL" command5.7 MediumthunderbirdopenEulerProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalthunderbirdopenEulerWebGL shader attribute memory corruption in Thunderbird for macOS5.9 MediumthunderbirdopenEulerPrivilege escalation in Thunderbird Updater8.8 HighthunderbirdopenEulerUser Interface (UI) Misrepresentation of attachment URL6.4 MediumthunderbirdopenEulerLeak of hashed Window credentials via crafted attachment URL6.3 Medium- Show moreLoading…