MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumMozillaThunderbirdopenSUSEWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumMozillaThunderbirdopenSUSEWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighMozillaThunderbirdopenSUSECertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighMozillaThunderbirdopenSUSECertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighMozillaThunderbirdopenSUSEUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumMozillaThunderbirdopenSUSEWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighMozillaThunderbirdopenSUSESearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighMozillaThunderbirdopenSUSESome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumMozillaThunderbirdopenSUSEWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumMozillaThunderbirdopenSUSEIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighMozillaThunderbirdopenSUSEDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighMozillaThunderbirdopenSUSEFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumMozillaThunderbirdopenSUSEIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumMozillaThunderbirdopenSUSEIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumMozillaThunderbirdopenSUSEA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumMozillaThunderbirdopenSUSESide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumMozillaThunderbirdopenSUSEIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalMozillaThunderbirdopenSUSEHeap buffer overflow in CefSharp9.6 CriticalMozillaThunderbirdopenSUSEUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighMozillaThunderbirdopenSUSEWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighMozillaThunderbirdopenSUSEBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumMozillaThunderbirdopenSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighMozillaThunderbirdopenSUSEIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighMozillaThunderbirdopenSUSEWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighMozillaThunderbirdopenSUSEBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighMozillaThunderbirdopenSUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumMozillaThunderbirdopenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumMozillaThunderbirdopenSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaThunderbirdopenSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaThunderbirdopenSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaThunderbirdopenSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaThunderbirdopenSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaThunderbirdopenSUSEIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighMozillaThunderbirdopenSUSEMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighMozillaThunderbirdopenSUSEWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumMozillaThunderbirdopenSUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighMozillaThunderbirdopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighMozillaThunderbirdopenSUSEBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 MediumMozillaThunderbirdopenSUSEA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalMozillaThunderbirdopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumMozillaThunderbirdopenSUSEA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighMozillaThunderbirdopenSUSEMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalMozillaThunderbirdopenSUSEOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 High- Show moreLoading…