MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalMozillaThunderbirdopenSUSEIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumMozillaThunderbirdopenSUSEA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalMozillaThunderbirdopenSUSEThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalMozillaThunderbirdopenSUSEInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighMozillaThunderbirdopenSUSEA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalMozillaThunderbirdopenSUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumMozillaThunderbirdopenSUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighMozillaThunderbirdopenSUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighMozillaThunderbirdopenSUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumMozillaThunderbirdopenSUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighMozillaThunderbirdopenSUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighMozillaThunderbirdopenSUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighMozillaThunderbirdopenSUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighMozillaThunderbirdopenSUSEInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalMozillaThunderbirdopenSUSESelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 HighMozillaThunderbirdopenSUSEIncorrect listing of stack frames4.3 MediumMozillaThunderbirdopenSUSEIncorrect listing of stack frames5.5 MediumMozillaThunderbirdopenSUSECSP violation leakage when using devtools5.3 MediumMozillaThunderbirdopenSUSEIncorrect handling of SameSite cookies9.8 CriticalMozillaThunderbirdopenSUSEForm validation popups could block exiting full-screen mode4.3 MediumMozillaThunderbirdopenSUSEMemory corruption in NSS8.8 HighMozillaThunderbirdopenSUSECursor could be moved out of the viewport using pointerlock.4.3 MediumMozillaThunderbirdopenSUSELeaving pointerlock by pressing the escape key could be prevented8.8 HighMozillaThunderbirdopenSUSEOut-of-bounds read in clipboard component8.2 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighMozillaThunderbirdopenSUSEMemory corruption in thread creation7.4 HighMozillaThunderbirdopenSUSEMemory corruption in NSS9.8 CriticalMozillaThunderbirdopenSUSERace condition in permission assignment4.7 MediumMozillaThunderbirdopenSUSEMemory corruption in WebGL API6.3 MediumMozillaThunderbirdopenSUSEBotan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters7.5 HighMozillaThunderbirdopenSUSEOn Windows, when using the 'Save As' functionality, an attacker could have tricked the browser...6.5 MediumMozillaThunderbirdopenSUSEMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighMozillaThunderbirdopenSUSEBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighMozillaThunderbirdopenSUSEOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumMozillaThunderbirdopenSUSEBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumMozillaThunderbirdopenSUSEBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumMozillaThunderbirdopenSUSEIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighMozillaThunderbirdopenSUSEWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighMozillaThunderbirdopenSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumMozillaThunderbirdopenSUSEA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumMozillaThunderbirdopenSUSEIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumMozillaThunderbirdopenSUSEPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighMozillaThunderbirdopenSUSEMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 HighMozillaThunderbirdopenSUSEThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 LowMozillaThunderbirdopenSUSEThe executable file warning was not presented when downloading .xrm-ms files. *Note: This issue...9.8 CriticalMozillaThunderbirdopenSUSEIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Medium- Show moreLoading…