MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSESites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumMozillaThunderbirdopenSUSEAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalMozillaThunderbirdopenSUSEAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 CriticalMozillaThunderbirdopenSUSEAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 HighMozillaThunderbirdopenSUSEA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighMozillaThunderbirdopenSUSEA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 CriticalMozillaThunderbirdopenSUSEIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalMozillaThunderbirdopenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalMozillaThunderbirdopenSUSEA buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE...8.8 HighMozillaThunderbirdopenSUSERSS fields can inject new lines into the created email structure, modifying the message body....5.3 MediumMozillaThunderbirdopenSUSECrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....4.3 MediumMozillaThunderbirdopenSUSEIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...8.8 HighMozillaThunderbirdopenSUSEIt is possible to spoof the sender's email address and display an arbitrary sender address to the...5.3 MediumMozillaThunderbirdopenSUSEThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalMozillaThunderbirdopenSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumMozillaThunderbirdopenSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 MediumMozillaThunderbirdopenSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalMozillaThunderbirdopenSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalMozillaThunderbirdopenSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalMozillaThunderbirdopenSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalMozillaThunderbirdopenSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 HighMozillaThunderbirdopenSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 MediumMozillaThunderbirdopenSUSEA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighMozillaThunderbirdopenSUSEWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalMozillaThunderbirdopenSUSEThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighMozillaThunderbirdopenSUSEA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalMozillaThunderbirdopenSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumMozillaThunderbirdopenSUSESame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 High- Show moreLoading…