MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumMozillaThunderbirdopenSUSEpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumMozillaThunderbirdopenSUSEWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumMozillaThunderbirdopenSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalMozillaThunderbirdopenSUSECross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumMozillaThunderbirdopenSUSEA flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird...5.3 MediumMozillaThunderbirdopenSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalMozillaThunderbirdopenSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumMozillaThunderbirdopenSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalMozillaThunderbirdopenSUSEAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighMozillaThunderbirdopenSUSEHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...8.8 HighMozillaThunderbirdopenSUSEDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...8.8 HighMozillaThunderbirdopenSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighMozillaThunderbirdopenSUSEA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighMozillaThunderbirdopenSUSEWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighMozillaThunderbirdopenSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighMozillaThunderbirdopenSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalMozillaThunderbirdopenSUSEPlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...4.3 MediumMozillaThunderbirdopenSUSEdDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...6.5 MediumMozillaThunderbirdopenSUSEDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 CriticalMozillaThunderbirdopenSUSEA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalMozillaThunderbirdopenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 HighMozillaThunderbirdopenSUSEIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 MediumMozillaThunderbirdopenSUSEAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumMozillaThunderbirdopenSUSEA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumMozillaThunderbirdopenSUSENPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighMozillaThunderbirdopenSUSEAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighMozillaThunderbirdopenSUSEAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighMozillaThunderbirdopenSUSEA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighMozillaThunderbirdopenSUSEPlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 MediumMozillaThunderbirdopenSUSEUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 HighMozillaThunderbirdopenSUSEIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 MediumMozillaThunderbirdopenSUSEPlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 HighMozillaThunderbirdopenSUSECrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 MediumMozillaThunderbirdopenSUSEIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...7.5 HighMozillaThunderbirdopenSUSEMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalMozillaThunderbirdopenSUSEA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 High- Show moreLoading…