MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEAddress bar spoofing via bidirectional characters6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalMozillaThunderbirdopenSUSEDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighMozillaThunderbirdopenSUSEThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...6.5 MediumMozillaThunderbirdopenSUSEA website could have obscured the full screen notification by using the file open dialog. This...4.3 MediumMozillaThunderbirdopenSUSEA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumMozillaThunderbirdopenSUSEDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighMozillaThunderbirdopenSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaThunderbirdopenSUSENSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumMozillaThunderbirdopenSUSEElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalMozillaThunderbirdopenSUSEIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 CriticalMozillaThunderbirdopenSUSEDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumMozillaThunderbirdopenSUSEA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumMozillaThunderbirdopenSUSEA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...9.8 CriticalMozillaThunderbirdopenSUSEDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighMozillaThunderbirdopenSUSEBuffer Overflow in WebGL glGetProgramiv8.8 HighMozillaThunderbirdopenSUSEInteger Overflow in RecordedSourceSurfaceCreation8.6 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighMozillaThunderbirdopenSUSEBrowsing Context potentially not cleared when closing Private Window7.5 HighMozillaThunderbirdopenSUSEXLL file extensions were downloadable without warnings4.3 MediumMozillaThunderbirdopenSUSEPush notifications saved to disk unencrypted6.5 MediumMozillaThunderbirdopenSUSEError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumMozillaThunderbirdopenSUSEMemory corruption in JIT UpdateRegExpStatics6.5 MediumMozillaThunderbirdopenSUSEMemory corruption in IPC FilePickerShownCallback6.5 MediumMozillaThunderbirdopenSUSEMemory corruption in IPC ColorPickerShownCallback6.5 MediumMozillaThunderbirdopenSUSEMemory corruption in IPC CanvasTranslator6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalMozillaThunderbirdopenSUSEWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighMozillaThunderbirdopenSUSEWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 MediumMozillaThunderbirdopenSUSEThe Firefox updater created a directory writable by non-privileged users. When uninstalling...6.5 MediumMozillaThunderbirdopenSUSEFull screen notification obscured by external program6.5 MediumMozillaThunderbirdopenSUSEFull screen notification obscured by file open dialog7.5 HighMozillaThunderbirdopenSUSEIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighMozillaThunderbirdopenSUSERace conditions in reference counting code were found through code inspection. These could have...5.9 MediumMozillaThunderbirdopenSUSEAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighMozillaThunderbirdopenSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaThunderbirdopenSUSEIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumMozillaThunderbirdopenSUSEOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumMozillaThunderbirdopenSUSEFile Extension Spoofing using the Text Direction Override Character7.5 HighMozillaThunderbirdopenSUSEUse-after-free in workers8.8 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighMozillaThunderbirdopenSUSEWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighMozillaThunderbirdopenSUSEA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumMozillaThunderbirdopenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaThunderbirdopenSUSEAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalMozillaThunderbirdopenSUSEThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Low- Show moreLoading…