MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 HighMozillaThunderbirdopenSUSEMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighMozillaThunderbirdopenSUSEWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighMozillaThunderbirdopenSUSEAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumMozillaThunderbirdopenSUSEA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumMozillaThunderbirdopenSUSEA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighMozillaThunderbirdopenSUSEAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumMozillaThunderbirdopenSUSEIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumMozillaThunderbirdopenSUSERibose RNP before 0.16.3 may hang when the input is malformed.5.3 MediumMozillaThunderbirdopenSUSEUse after free in libwebp5.3 MediumMozillaThunderbirdopenSUSEOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighMozillaThunderbirdopenSUSEA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumMozillaThunderbirdopenSUSESimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 MediumMozillaThunderbirdopenSUSEA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 CriticalMozillaThunderbirdopenSUSEFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighMozillaThunderbirdopenSUSEWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighMozillaThunderbirdopenSUSEAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighMozillaThunderbirdopenSUSEFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumMozillaThunderbirdopenSUSEA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumMozillaThunderbirdopenSUSEA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 MediumMozillaThunderbirdopenSUSEAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 CriticalMozillaThunderbirdopenSUSEUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumMozillaThunderbirdopenSUSEPrototype pollution in matrix-js-sdk8.2 HighMozillaThunderbirdopenSUSEMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighMozillaThunderbirdopenSUSEDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumMozillaThunderbirdopenSUSEWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 MediumMozillaThunderbirdopenSUSEWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighMozillaThunderbirdopenSUSEWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumMozillaThunderbirdopenSUSESometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumMozillaThunderbirdopenSUSEMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 MediumMozillaThunderbirdopenSUSEAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 HighMozillaThunderbirdopenSUSEIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 MediumMozillaThunderbirdopenSUSEMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighMozillaThunderbirdopenSUSEWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumMozillaThunderbirdopenSUSEModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighMozillaThunderbirdopenSUSEAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighMozillaThunderbirdopenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaThunderbirdopenSUSEWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighMozillaThunderbirdopenSUSEA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumMozillaThunderbirdopenSUSEPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighMozillaThunderbirdopenSUSEThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumMozillaThunderbirdopenSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighMozillaThunderbirdopenSUSECertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighMozillaThunderbirdopenSUSECalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumMozillaThunderbirdopenSUSEContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumMozillaThunderbirdopenSUSEURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumMozillaThunderbirdopenSUSEMalicious command could be hidden in devtools output on Windows6.5 MediumMozillaThunderbirdopenSUSEArbitrary file read from GTK drag and drop on Linux6.5 Medium- Show moreLoading…