MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSESandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 HighMozillaThunderbirdopenSUSEUse-after-free in the WebRTC: Signaling component9.8 CriticalMozillaThunderbirdopenSUSEUse-after-free in the WebRTC: Audio/Video component8.8 HighMozillaThunderbirdopenSUSESame-origin policy bypass in the DOM: Workers component8.1 HighMozillaThunderbirdopenSUSEMitigation bypass in the DOM: Security component8.1 HighMozillaThunderbirdopenSUSESame-origin policy bypass in the DOM: Notifications component8.1 HighMozillaThunderbirdopenSUSEIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 HighMozillaThunderbirdopenSUSESpoofing issue in Firefox3.4 LowMozillaThunderbirdopenSUSEUse-after-free in the Audio/Video component8.8 HighMozillaThunderbirdopenSUSEMitigation bypass in the DOM: Core & HTML component6.1 MediumMozillaThunderbirdopenSUSERace condition in the Graphics component7.5 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighMozillaThunderbirdopenSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 HighMozillaThunderbirdopenSUSEAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumMozillaThunderbirdopenSUSESome non-writable Object properties could be modified6.5 MediumMozillaThunderbirdopenSUSECross-process information leaked due to malicious IPC messages9.8 CriticalMozillaThunderbirdopenSUSEOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalMozillaThunderbirdopenSUSEUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighMozillaThunderbirdopenSUSEInformation disclosure in the Networking: Cache component6.2 MediumMozillaThunderbirdopenSUSEInteger overflow in the SVG component8.8 HighMozillaThunderbirdopenSUSEIncorrect boundary conditions in the JavaScript: GC component6.5 MediumMozillaThunderbirdopenSUSESame-origin policy bypass in the Layout component6.5 MediumMozillaThunderbirdopenSUSESandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighMozillaThunderbirdopenSUSESandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighMozillaThunderbirdopenSUSElibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaThunderbirdopenSUSEDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaThunderbirdopenSUSEUninitialized memory in the JavaScript Engine component6.5 MediumMozillaThunderbirdopenSUSESame-origin policy bypass in the Graphics: Canvas2D component8.1 HighMozillaThunderbirdopenSUSESandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaThunderbirdopenSUSESearch terms persisted in URL bar8.1 HighMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaThunderbirdopenSUSEIncorrect JavaScript state machine for generators6.5 MediumMozillaThunderbirdopenSUSECSP frame-src was not correctly enforced for paths9.8 CriticalMozillaThunderbirdopenSUSEXSLT documents could bypass CSP8.1 HighMozillaThunderbirdopenSUSEIncorrect URL stripping in CSP reports9.8 CriticalMozillaThunderbirdopenSUSENameless cookies shadow secure cookies9.1 CriticalMozillaThunderbirdopenSUSEDNS rebinding circumvents CORS8.1 HighMozillaThunderbirdopenSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 HighMozillaThunderbirdopenSUSEjavascript: URLs executed on object and embed tags8.1 HighMozillaThunderbirdopenSUSELarge branch table could lead to truncated instruction9.8 CriticalMozillaThunderbirdopenSUSEJavaScript engine only wrote partial return value to stack6.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighMozillaThunderbirdopenSUSESave as in Devtools could download files without sanitizing the extension8.1 HighMozillaThunderbirdopenSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 Medium- Show moreLoading…