MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalMozillaThunderbirdopenSUSECertificate length was not properly checked8.8 HighMozillaThunderbirdopenSUSEPotential opening of private browsing tabs in normal browsing windows6.5 MediumMozillaThunderbirdopenSUSEUse-after-free during concurrent delazification7.5 HighMozillaThunderbirdopenSUSEA bug in WebAssembly code generation could result in a crash8.8 HighMozillaThunderbirdopenSUSEUse-after-free in Custom Highlight8.8 HighMozillaThunderbirdopenSUSEUse-after-free in XSLT9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumMozillaThunderbirdopenSUSEMemory corruption when using JavaScript Text Segmentation7.7 HighMozillaThunderbirdopenSUSECompartment mismatch when parsing JavaScript JSON module4.0 MediumMozillaThunderbirdopenSUSEAlt-Svc ALPN validation failure when redirected4.0 MediumMozillaThunderbirdopenSUSEUse-after-free when breaking lines in text5.3 MediumMozillaThunderbirdopenSUSEWebChannel APIs susceptible to confused deputy attack5.4 MediumMozillaThunderbirdopenSUSEIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighMozillaThunderbirdopenSUSEA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 CriticalMozillaThunderbirdopenSUSEA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalMozillaThunderbirdopenSUSEWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighMozillaThunderbirdopenSUSEThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumMozillaThunderbirdopenSUSEA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumMozillaThunderbirdopenSUSEEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumMozillaThunderbirdopenSUSEThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 CriticalMozillaThunderbirdopenSUSEAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumMozillaThunderbirdopenSUSEAn attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be...8.8 HighMozillaThunderbirdopenSUSEUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 MediumMozillaThunderbirdopenSUSEmatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3 MediumMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighMozillaThunderbirdopenSUSEBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighMozillaThunderbirdopenSUSEA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumMozillaThunderbirdopenSUSERepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumMozillaThunderbirdopenSUSEVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumMozillaThunderbirdopenSUSETruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumMozillaThunderbirdopenSUSEIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumMozillaThunderbirdopenSUSEThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumMozillaThunderbirdopenSUSEAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighMozillaThunderbirdopenSUSEA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighMozillaThunderbirdopenSUSEAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalMozillaThunderbirdopenSUSEA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighMozillaThunderbirdopenSUSEA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighMozillaThunderbirdopenSUSEBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumMozillaThunderbirdopenSUSEA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumMozillaThunderbirdopenSUSEIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighMozillaThunderbirdopenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighMozillaThunderbirdopenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighMozillaThunderbirdopenSUSEA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalMozillaThunderbirdopenSUSEAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 HighMozillaThunderbirdopenSUSEWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after...6.5 Medium- Show moreLoading…