MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaThunderbirdopenSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaThunderbirdopenSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumMozillaThunderbirdopenSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaThunderbirdopenSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaThunderbirdopenSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaThunderbirdopenSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaThunderbirdopenSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaThunderbirdopenSUSEData race in crossbeam-deque9.8 CriticalMozillaThunderbirdopenSUSEIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighMozillaThunderbirdopenSUSEA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighMozillaThunderbirdopenSUSEOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighMozillaThunderbirdopenSUSEA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighMozillaThunderbirdopenSUSEThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighMozillaThunderbirdopenSUSEIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 MediumMozillaThunderbirdopenSUSEOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 MediumMozillaThunderbirdopenSUSESignatures are written to disk before and read during verification, which might be subject to a...2.5 LowMozillaThunderbirdopenSUSEPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighMozillaThunderbirdopenSUSEThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumMozillaThunderbirdopenSUSEWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighMozillaThunderbirdopenSUSEIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighMozillaThunderbirdopenSUSEThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumMozillaThunderbirdopenSUSEWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighMozillaThunderbirdopenSUSEA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighMozillaThunderbirdopenSUSEAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 MediumMozillaThunderbirdopenSUSEThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 MediumMozillaThunderbirdopenSUSEIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 MediumMozillaThunderbirdopenSUSEThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 HighMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighMozillaThunderbirdopenSUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumMozillaThunderbirdopenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumMozillaThunderbirdopenSUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighMozillaThunderbirdopenSUSEWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumMozillaThunderbirdopenSUSEAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumMozillaThunderbirdopenSUSEIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighMozillaThunderbirdopenSUSEFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighMozillaThunderbirdopenSUSEPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighMozillaThunderbirdopenSUSEUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighMozillaThunderbirdopenSUSEIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumMozillaThunderbirdopenSUSEUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighMozillaThunderbirdopenSUSEDuring the plaintext phase of the STARTTLS connection setup, protocol commands could have been...8.8 HighMozillaThunderbirdopenSUSEIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighMozillaThunderbirdopenSUSEWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Medium- Show moreLoading…