MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalMozillaThunderbirdopenSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaThunderbirdopenSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaThunderbirdopenSUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaThunderbirdopenSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaThunderbirdopenSUSENo warning when opening executable terminal files on macOS8.8 HighMozillaThunderbirdopenSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaThunderbirdopenSUSEUse-after-free in FontFaceSet9.8 CriticalMozillaThunderbirdopenSUSEUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 MediumMozillaThunderbirdopenSUSEMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighMozillaThunderbirdopenSUSEClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumMozillaThunderbirdopenSUSEScript element events leaked cross-origin resource status4.3 MediumMozillaThunderbirdopenSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaThunderbirdopenSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaThunderbirdopenSUSEError handling for script execution was incorrectly isolated from web content4.3 MediumMozillaThunderbirdopenSUSEA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 HighMozillaThunderbirdopenSUSEOut-of-bounds access when optimizing linear sums8.8 HighMozillaThunderbirdopenSUSEOut-of-bounds access when resolving Promise objects9.8 CriticalMozillaThunderbirdopenSUSETracking Links in Attachments Bypassed Remote Content Blocking6.5 MediumMozillaThunderbirdopenSUSEJavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1 HighMozillaThunderbirdopenSUSEA crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...7.5 HighMozillaThunderbirdopenSUSESender Spoofing via Malformed From Header in Thunderbird7.5 HighMozillaThunderbirdopenSUSEMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighMozillaThunderbirdopenSUSEUnsafe attribute access during XPath parsing4.8 MediumMozillaThunderbirdopenSUSEPotential local code execution in "copy as cURL" command5.7 MediumMozillaThunderbirdopenSUSEProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalMozillaThunderbirdopenSUSEWebGL shader attribute memory corruption in Thunderbird for macOS5.9 MediumMozillaThunderbirdopenSUSEPrivilege escalation in Thunderbird Updater8.8 HighMozillaThunderbirdopenSUSEUser Interface (UI) Misrepresentation of attachment URL6.4 MediumMozillaThunderbirdopenSUSELeak of hashed Window credentials via crafted attachment URL6.3 MediumMozillaThunderbirdopenSUSEInformation Disclosure of /tmp directory listing6.3 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighMozillaThunderbirdopenSUSEURL Bar Spoofing via non-BMP Unicode characters7.3 HighMozillaThunderbirdopenSUSEUse-after-free triggered by XSLTProcessor6.5 MediumMozillaThunderbirdopenSUSECrafted email message incorrectly shown as being encrypted7.0 HighMozillaThunderbirdopenSUSEDownloading of OpenPGP keys from WKD used incorrect padding5.3 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighMozillaThunderbirdopenSUSEAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighMozillaThunderbirdopenSUSEClickjacking the registerProtocolHandler info-bar4.3 MediumMozillaThunderbirdopenSUSEUnexpected GC during RegExp bailout processing6.5 MediumMozillaThunderbirdopenSUSEJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighMozillaThunderbirdopenSUSEInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighMozillaThunderbirdopenSUSEUse-after-free in WebTransportChild7.5 HighMozillaThunderbirdopenSUSEAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighMozillaThunderbirdopenSUSEUnsanitized address book fields5.4 MediumMozillaThunderbirdopenSUSEAddress of e-mail sender can be spoofed by malicious email6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Critical- Show moreLoading…