MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumMozillaThunderbirdopenSUSEAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighMozillaThunderbirdopenSUSEA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalMozillaThunderbirdopenSUSEAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighMozillaThunderbirdopenSUSEA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighMozillaThunderbirdopenSUSEThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 MediumMozillaThunderbirdopenSUSEA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighMozillaThunderbirdopenSUSEAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighMozillaThunderbirdopenSUSEIf a Thunderbird user quoted from an HTML email, for example by replying to the email, and the...8.1 HighMozillaThunderbirdopenSUSEMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighMozillaThunderbirdopenSUSEUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumMozillaThunderbirdopenSUSEIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumMozillaThunderbirdopenSUSEKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumMozillaThunderbirdopenSUSEWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighMozillaThunderbirdopenSUSECross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumMozillaThunderbirdopenSUSEWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumMozillaThunderbirdopenSUSEThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighMozillaThunderbirdopenSUSEThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumMozillaThunderbirdopenSUSEIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalMozillaThunderbirdopenSUSEFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumMozillaThunderbirdopenSUSEThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumMozillaThunderbirdopenSUSEService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumMozillaThunderbirdopenSUSEWhen saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple...7.8 HighMozillaThunderbirdopenSUSEMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaThunderbirdopenSUSEIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumMozillaThunderbirdopenSUSECertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighMozillaThunderbirdopenSUSEA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighMozillaThunderbirdopenSUSEMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 HighMozillaThunderbirdopenSUSEMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 HighMozillaThunderbirdopenSUSEMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions7.5 HighMozillaThunderbirdopenSUSEMatrix Javascript SDK improper beacon events can cause availability issues4.3 MediumMozillaThunderbirdopenSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaThunderbirdopenSUSEAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 MediumMozillaThunderbirdopenSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaThunderbirdopenSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaThunderbirdopenSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaThunderbirdopenSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaThunderbirdopenSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaThunderbirdopenSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaThunderbirdopenSUSEPrototype pollution in matrix-js-sdk8.2 HighMozillaThunderbirdopenSUSEWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 MediumMozillaThunderbirdopenSUSEIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 HighMozillaThunderbirdopenSUSEWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 MediumMozillaThunderbirdopenSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaThunderbirdopenSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaThunderbirdopenSUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaThunderbirdopenSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaThunderbirdopenSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 High- Show moreLoading…