Search CVE reports
301 – 310 of 1943 results
CVE-2022-3857
Low priorityA flaw was found in libpng 1.6.38. A crafted PNG image can lead to a segmentation fault and denial of service in png_setup_paeth_row() function.
5 affected packages
chromium-browser, firefox, libpng, libpng1.6, thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | Not affected | Not affected | Not affected | Ignored | Ignored |
| firefox | Not affected | Not affected | Ignored | Ignored | Ignored |
| libpng | — | Not in release | Not in release | Not in release | Vulnerable |
| libpng1.6 | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Needs evaluation |
| thunderbird | Ignored | Ignored | Ignored | Ignored | Ignored |
CVE-2023-0616
Medium priorityIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the...
1 affected packages
thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| thunderbird | — | Fixed | Fixed | Fixed | Ignored |
CVE-2021-43529
Medium prioritySome fixes available 2 of 3
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME...
1 affected packages
thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| thunderbird | — | Not affected | Fixed | Fixed | Ignored |
CVE-2019-17003
Medium priorityScanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
7 affected packages
firefox, mozjs38, mozjs52, mozjs68, mozjs78...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | — | Not affected | Not affected | Ignored | Ignored |
| mozjs38 | — | Not in release | Not in release | Not affected | Not in release |
| mozjs52 | — | Not in release | Not affected | Not affected | Not in release |
| mozjs68 | — | Not in release | Not affected | Not in release | Not in release |
| mozjs78 | — | Not affected | Not in release | Not in release | Not in release |
| mozjs91 | — | Not affected | Not in release | Not in release | Not in release |
| thunderbird | — | Not affected | Not affected | Ignored | Ignored |
CVE-2023-25746
Medium priorityMemory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...
2 affected packages
firefox, thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | — | Not affected | Not affected | Ignored | Ignored |
| thunderbird | — | Fixed | Fixed | Fixed | Ignored |
CVE-2023-25745
Medium prioritySome fixes available 2 of 11
Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects...
7 affected packages
firefox, mozjs38, mozjs52, mozjs68, mozjs78...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | Not affected | Not affected | Fixed | Fixed | Ignored |
| mozjs38 | — | Not in release | Not in release | Ignored | Not in release |
| mozjs52 | — | Not in release | Ignored | Ignored | Not in release |
| mozjs68 | — | Not in release | Ignored | Not in release | Not in release |
| mozjs78 | Not in release | Ignored | Not in release | Not in release | Not in release |
| mozjs91 | — | Ignored | Not in release | Not in release | Not in release |
| thunderbird | Not affected | Not affected | Not affected | Ignored | Ignored |
CVE-2023-25744
Medium prioritySome fixes available 2 of 11
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...
7 affected packages
firefox, mozjs38, mozjs52, mozjs68, mozjs78...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | Not affected | Not affected | Fixed | Fixed | Ignored |
| mozjs38 | — | Not in release | Not in release | Ignored | Not in release |
| mozjs52 | — | Not in release | Ignored | Ignored | Not in release |
| mozjs68 | — | Not in release | Ignored | Not in release | Not in release |
| mozjs78 | Not in release | Ignored | Not in release | Not in release | Not in release |
| mozjs91 | — | Ignored | Not in release | Not in release | Not in release |
| thunderbird | Not affected | Not affected | Not affected | Ignored | Ignored |
CVE-2023-25742
Medium prioritySome fixes available 6 of 14
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
7 affected packages
firefox, mozjs38, mozjs52, mozjs68, mozjs78...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | Not affected | Not affected | Fixed | Fixed | Ignored |
| mozjs38 | — | Not in release | Not in release | Ignored | Not in release |
| mozjs52 | — | Not in release | Ignored | Ignored | Not in release |
| mozjs68 | — | Not in release | Ignored | Not in release | Not in release |
| mozjs78 | Not in release | Ignored | Not in release | Not in release | Not in release |
| mozjs91 | — | Ignored | Not in release | Not in release | Not in release |
| thunderbird | Not affected | Fixed | Fixed | Fixed | Ignored |
CVE-2023-25741
Medium prioritySome fixes available 2 of 11
When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled...
7 affected packages
firefox, mozjs38, mozjs52, mozjs68, mozjs78...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | Not affected | Not affected | Fixed | Fixed | Ignored |
| mozjs38 | — | Not in release | Not in release | Ignored | Not in release |
| mozjs52 | — | Not in release | Ignored | Ignored | Not in release |
| mozjs68 | — | Not in release | Ignored | Not in release | Not in release |
| mozjs78 | Not in release | Ignored | Not in release | Not in release | Not in release |
| mozjs91 | — | Ignored | Not in release | Not in release | Not in release |
| thunderbird | Not affected | Not affected | Not affected | Ignored | Ignored |
CVE-2023-25739
Medium prioritySome fixes available 9 of 17
Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and...
8 affected packages
firefox, mozjs102, mozjs38, mozjs52, mozjs68...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | Not affected | Not affected | Fixed | Fixed | Ignored |
| mozjs102 | Not affected | Fixed | Not in release | Not in release | Not in release |
| mozjs38 | — | Not in release | Not in release | Ignored | Not in release |
| mozjs52 | — | Not in release | Ignored | Ignored | Not in release |
| mozjs68 | — | Not in release | Ignored | Not in release | Not in release |
| mozjs78 | Not in release | Ignored | Not in release | Not in release | Not in release |
| mozjs91 | — | Ignored | Not in release | Not in release | Not in release |
| thunderbird | Not affected | Fixed | Fixed | Fixed | Ignored |