MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighMozillaThunderbirdopenSUSEWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighMozillaThunderbirdopenSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumMozillaThunderbirdopenSUSEIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalMozillaThunderbirdopenSUSEIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighMozillaThunderbirdopenSUSEIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumMozillaThunderbirdopenSUSEA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 MediumMozillaThunderbirdopenSUSEThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 HighMozillaThunderbirdopenSUSEMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighMozillaThunderbirdopenSUSEMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumMozillaThunderbirdopenSUSEAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumMozillaThunderbirdopenSUSESecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumMozillaThunderbirdopenSUSEWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumMozillaThunderbirdopenSUSEWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumMozillaThunderbirdopenSUSEWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighMozillaThunderbirdopenSUSECertain network request objects were freed too early when releasing a network request handle....8.8 HighMozillaThunderbirdopenSUSEMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumMozillaThunderbirdopenSUSEApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighMozillaThunderbirdopenSUSEConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighMozillaThunderbirdopenSUSEIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalMozillaThunderbirdopenSUSEWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 MediumMozillaThunderbirdopenSUSEThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 CriticalMozillaThunderbirdopenSUSEThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 MediumMozillaThunderbirdopenSUSEIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumMozillaThunderbirdopenSUSEUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumMozillaThunderbirdopenSUSEDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumMozillaThunderbirdopenSUSEUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumMozillaThunderbirdopenSUSEWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumMozillaThunderbirdopenSUSEFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighMozillaThunderbirdopenSUSEBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumMozillaThunderbirdopenSUSEAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighMozillaThunderbirdopenSUSEUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumMozillaThunderbirdopenSUSEThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighMozillaThunderbirdopenSUSEMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumMozillaThunderbirdopenSUSEDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumMozillaThunderbirdopenSUSEBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumMozillaThunderbirdopenSUSEThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumMozillaThunderbirdopenSUSEThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumMozillaThunderbirdopenSUSEWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighMozillaThunderbirdopenSUSEThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalMozillaThunderbirdopenSUSEThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...5.9 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaThunderbirdopenSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaThunderbirdopenSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaThunderbirdopenSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaThunderbirdopenSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighMozillaThunderbirdopenSUSEThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...5.9 Medium- Show moreLoading…