MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighMozillaThunderbirdopenSUSEUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighMozillaThunderbirdopenSUSEUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalMozillaThunderbirdopenSUSEThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumMozillaThunderbirdopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighMozillaThunderbirdopenSUSEWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighMozillaThunderbirdopenSUSEBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighMozillaThunderbirdopenSUSEWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighMozillaThunderbirdopenSUSEusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumMozillaThunderbirdopenSUSEBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 MediumMozillaThunderbirdopenSUSEWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 MediumMozillaThunderbirdopenSUSEIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 MediumMozillaThunderbirdopenSUSEWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 MediumMozillaThunderbirdopenSUSEWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 MediumMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighMozillaThunderbirdopenSUSEIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumMozillaThunderbirdopenSUSEIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighMozillaThunderbirdopenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaThunderbirdopenSUSEDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 MediumMozillaThunderbirdopenSUSEDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighMozillaThunderbirdopenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaThunderbirdopenSUSEDuring the initialization of a new content process, a pointer offset can be manipulated leading...8.8 HighMozillaThunderbirdopenSUSEWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighMozillaThunderbirdopenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighMozillaThunderbirdopenSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighMozillaThunderbirdopenSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighMozillaThunderbirdopenSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighMozillaThunderbirdopenSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighMozillaThunderbirdopenSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighMozillaThunderbirdopenSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaThunderbirdopenSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaThunderbirdopenSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaThunderbirdopenSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaThunderbirdopenSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaThunderbirdopenSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaThunderbirdopenSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaThunderbirdopenSUSEA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 HighMozillaThunderbirdopenSUSEEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 MediumMozillaThunderbirdopenSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaThunderbirdopenSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaThunderbirdopenSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaThunderbirdopenSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaThunderbirdopenSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaThunderbirdopenSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 High- Show moreLoading…