Homepage

thunderbird-debuginfo vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the thunderbird-debuginfo package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Out-of-Bounds

<0:128.13.0-1.amzn2.0.1
  • M
Numeric Truncation Error

<0:128.11.1-1.amzn2.0.2
  • H
NULL Pointer Dereference

<0:128.13.0-1.amzn2.0.1
  • H
Incorrect Default Permissions

<0:128.13.0-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:128.13.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:128.13.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:128.13.0-1.amzn2.0.1
  • H
Use of Uninitialized Variable

<0:128.13.0-1.amzn2.0.1
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

<0:128.13.0-1.amzn2.0.1
  • H
Protection Mechanism Failure

<0:128.13.0-1.amzn2.0.1
  • H
Resource Exhaustion

<0:128.11.1-1.amzn2.0.1
  • H
Out-of-Bounds

<0:128.11.0-1.amzn2.0.1
  • H
Improper Encoding or Escaping of Output

<0:128.11.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:128.11.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:128.11.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:128.11.0-1.amzn2.0.1
  • H
Double Free

<0:128.11.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:128.11.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.amzn2.0.1
  • H
Improper Encoding or Escaping of Output

<0:128.11.0-1.amzn2.0.1
  • H
Authentication Bypass

<0:128.10.1-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:128.10.0-1.amzn2.0.1
  • H
Information Exposure

<0:128.10.1-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:128.10.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:128.10.0-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:128.10.0-1.amzn2.0.1
  • H
Authentication Bypass

<0:128.10.1-1.amzn2.0.1
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:128.10.0-1.amzn2.0.1
  • H
Information Exposure

<0:128.10.0-1.amzn2.0.1
  • H
Authentication Bypass

<0:128.10.1-1.amzn2.0.1
  • H
Insufficient Compartmentalization

<0:128.10.0-1.amzn2.0.1
  • H
Insufficient Granularity of Access Control

<0:128.10.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:128.10.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:68.10.0-1.amzn2
  • H
Use After Free

<0:68.10.0-1.amzn2
  • H
Buffer Overflow

<0:128.9.1-1.amzn2.0.1
  • H
Use After Free

<0:128.9.1-1.amzn2.0.1
  • H
Use After Free

<0:68.10.0-1.amzn2
  • H
Information Exposure

<0:68.10.0-1.amzn2
  • H
Origin Validation Error

<0:128.9.1-1.amzn2.0.1
  • H
Improper Following of a Certificate's Chain of Trust

<0:68.10.0-1.amzn2
  • M
Improper Check for Unusual or Exceptional Conditions

<0:128.8.1-1.amzn2.0.4
  • M
Out-of-bounds Read

<0:128.8.1-1.amzn2.0.4
  • M
Incorrect Bitwise Shift of Integer

<0:128.8.1-1.amzn2.0.4
  • H
Information Exposure

<0:68.9.0-1.amzn2
  • H
Use After Free

<0:68.9.0-1.amzn2
  • H
Buffer Overflow

<0:68.9.0-1.amzn2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.9.0-1.amzn2
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:128.8.1-1.amzn2.0.1
  • H
Improper Cleanup on Thrown Exception

<0:128.8.1-1.amzn2.0.1
  • H
Use After Free

<0:128.8.1-1.amzn2.0.1
  • H
Reliance on Cookies without Validation and Integrity Checking

<0:128.8.1-1.amzn2.0.1
  • H
Information Exposure

<0:128.8.1-1.amzn2.0.1
  • H
Improper Check for Unusual or Exceptional Conditions

<0:128.8.1-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:128.8.1-1.amzn2.0.1
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:128.8.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:128.8.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:128.8.1-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:128.8.1-1.amzn2.0.1
  • H
Improper Use of Validation Framework

<0:128.8.1-1.amzn2.0.1
  • H
CVE-2024-43097

<0:128.8.1-1.amzn2.0.1
  • H
Uncontrolled Memory Allocation

<0:128.7.0-1.amzn2.0.2
  • H
Improper Input Validation

<0:128.7.0-1.amzn2.0.2
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:128.7.0-1.amzn2.0.2
  • H
Race Condition

<0:128.7.0-1.amzn2.0.2
  • H
Improper Validation of Specified Quantity in Input

<0:128.7.0-1.amzn2.0.2
  • H
Buffer Overflow

<0:128.7.0-1.amzn2.0.2
  • H
Buffer Overflow

<0:128.7.0-1.amzn2.0.2
  • H
CVE-2024-50336

<0:128.7.0-1.amzn2.0.2
  • H
Cross-site Scripting (XSS)

<0:128.7.0-1.amzn2.0.2
  • H
Use After Free

<0:128.7.0-1.amzn2.0.2
  • H
Use After Free

<0:128.7.0-1.amzn2.0.2
  • H
Out-of-Bounds

<0:128.7.0-1.amzn2.0.2
  • H
Improper Verification of Source of a Communication Channel

<0:128.7.0-1.amzn2.0.2
  • H
Overly Permissive Cross-domain Whitelist

<0:128.7.0-1.amzn2.0.2
  • H
Open Redirect

<0:128.7.0-1.amzn2.0.2
  • H
Buffer Overflow

<0:128.7.0-1.amzn2.0.2
  • H
Buffer Overflow

<0:128.7.0-1.amzn2.0.2
  • H
CVE-2024-8900

<0:128.7.0-1.amzn2.0.2
  • H
Resource Exhaustion

<0:128.7.0-1.amzn2.0.2
  • H
Use After Free

<0:128.7.0-1.amzn2.0.2
  • H
Information Exposure

<0:128.7.0-1.amzn2.0.2
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:128.7.0-1.amzn2.0.2
  • H
Out-of-Bounds

<0:128.7.0-1.amzn2.0.2
  • H
Improper Check for Unusual or Exceptional Conditions

<0:128.7.0-1.amzn2.0.2
  • H
Improper Control of Interaction Frequency

<0:128.7.0-1.amzn2.0.2
  • H
Improper Handling of Insufficient Permissions or Privileges

<0:128.7.0-1.amzn2.0.2
  • H
Improper Handling of Insufficient Permissions or Privileges

<0:128.7.0-1.amzn2.0.2
  • H
Use After Free

<0:128.7.0-1.amzn2.0.2
  • H
Cross-site Scripting (XSS)

<0:102.7.1-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:102.7.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.16.0-1.amzn2.0.1
  • H
Origin Validation Error

<0:115.16.0-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:115.16.0-1.amzn2.0.1
  • H
Use After Free

<0:115.16.0-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:115.16.0-1.amzn2.0.1
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:115.15.0-1.amzn2.0.1
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:115.15.0-1.amzn2.0.1
  • H
Incorrect Type Conversion or Cast

<0:115.15.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.13.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:115.15.0-1.amzn2.0.1
  • H
CVE-2024-7529

<0:115.14.0-1.amzn2.0.1
  • H
Use After Free

<0:115.14.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:115.14.0-1.amzn2.0.1
  • H
Use of Uninitialized Resource

<0:115.14.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:115.14.0-1.amzn2.0.1
  • H
Improper Privilege Management

<0:115.14.0-1.amzn2.0.1
  • H
Use After Free

<0:115.14.0-1.amzn2.0.1
  • M
Heap-based Buffer Overflow

<0:115.12.1-1.amzn2.0.2
  • H
Buffer Overflow

<0:115.12.1-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.11.0-2.amzn2.0.1
  • H
Buffer Overflow

<0:91.11.0-2.amzn2.0.1
  • H
Use After Free

<0:115.11.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:115.11.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.11.0-1.amzn2.0.1
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:115.11.0-1.amzn2.0.1
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:115.11.0-1.amzn2.0.1
  • H
Improper Check for Unusual or Exceptional Conditions

<0:115.11.0-1.amzn2.0.1
  • H
Improper Check for Certificate Revocation

<0:102.7.1-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:102.4.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.9.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:115.9.0-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:115.9.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:115.9.0-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:115.9.0-1.amzn2.0.1
  • H
Use After Free

<0:115.9.0-1.amzn2.0.1
  • L
Missing Encryption of Sensitive Data

<0:115.8.1-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:115.8.0-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:115.8.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.8.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.8.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.8.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:115.8.0-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:115.8.0-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:102.8.0-1.amzn2.0.1
  • M
Improper Input Validation

<0:115.7.0-1.amzn2.0.2
  • M
Out-of-bounds Write

<0:115.7.0-1.amzn2.0.2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.amzn2.0.2
  • M
Improper Input Validation

<0:115.7.0-1.amzn2.0.2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.amzn2.0.2
  • M
Inadequate Encryption Strength

<0:115.7.0-1.amzn2.0.2
  • M
Buffer Overflow

<0:115.7.0-1.amzn2.0.2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.amzn2.0.2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.amzn2.0.2
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.amzn2.0.2
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.5.0-1.amzn2.0.1
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.5.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:115.5.0-1.amzn2.0.1
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.6.0-1.amzn2.0.1
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.amzn2.0.1
  • H
Improper Verification of Cryptographic Signature

<0:115.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.5.0-1.amzn2.0.1
  • H
Directory Traversal

<0:115.5.0-1.amzn2.0.1
  • H
Use After Free

<0:115.6.0-1.amzn2.0.1
  • H
Improper Verification of Cryptographic Signature

<0:115.6.0-1.amzn2.0.1
  • H
Use After Free

<0:115.5.0-1.amzn2.0.1
  • H
Use After Free

<0:115.5.0-1.amzn2.0.1
  • H
Improper Input Validation

<0:115.6.0-1.amzn2.0.1
  • H
Improper Input Validation

<0:115.6.0-1.amzn2.0.1
  • H
Race Condition

<0:115.6.0-1.amzn2.0.1
  • H
Use After Free

<0:115.6.0-1.amzn2.0.1
  • H
Double Free

<0:102.10.0-1.amzn2.0.1
  • H
Memory Leak

<0:115.4.1-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.4.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:115.4.1-1.amzn2.0.1
  • H
Multiple Interpretations of UI Input

<0:115.4.1-1.amzn2.0.1
  • H
Open Redirect

<0:115.4.1-1.amzn2.0.1
  • H
Product UI does not Warn User of Unsafe Actions

<0:115.4.1-1.amzn2.0.1
  • M
Improper Handling of Exceptional Conditions

<0:102.15.1-1.amzn2.0.2
  • H
Heap-based Buffer Overflow

<0:102.15.1-1.amzn2.0.1
  • H
Heap-based Buffer Overflow

<0:102.15.1-1.amzn2.0.1
  • H
Unrestricted Upload of File with Dangerous Type

<0:102.15.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.15.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.15.0-1.amzn2.0.1
  • H
Use After Free

<0:102.13.0-2.amzn2.0.1
  • H
Compilation with Insufficient Warnings or Errors

<0:102.13.0-2.amzn2.0.1
  • H
Buffer Overflow

<0:102.13.0-2.amzn2.0.1
  • H
Authentication Bypass

<0:102.13.0-2.amzn2.0.1
  • H
Use After Free

<0:102.13.0-2.amzn2.0.1
  • H
Improper Handling of Insufficient Permissions or Privileges

<0:102.11.0-1.amzn2.0.1
  • H
Resource Exhaustion

<0:102.11.0-1.amzn2.0.1
  • H
Insufficient Verification of Data Authenticity

<0:102.11.0-1.amzn2.0.1
  • H
Use of Uninitialized Variable

<0:102.11.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.11.0-1.amzn2.0.1
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:102.11.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:102.11.0-1.amzn2.0.1
  • H
Resource Exhaustion

<0:102.10.0-1.amzn2.0.1
  • H
Failure to Sanitize Special Element

<0:102.10.0-1.amzn2.0.1
  • H
Reachable Assertion

<0:102.10.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:102.10.0-1.amzn2.0.1
  • H
Unrestricted Upload of File with Dangerous Type

<0:102.10.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:102.10.0-1.amzn2.0.1
  • H
Direct Request ('Forced Browsing')

<0:102.10.0-1.amzn2.0.1
  • H
Incorrect Calculation

<0:102.10.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.10.0-1.amzn2.0.1
  • H
Product UI does not Warn User of Unsafe Actions

<0:102.10.0-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:102.9.0-1.amzn2.0.1
  • H
Incorrect Type Conversion or Cast

<0:102.9.0-1.amzn2.0.1
  • H
Information Exposure

<0:102.9.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:102.9.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.9.0-1.amzn2.0.1
  • H
Use After Free

<0:102.8.0-1.amzn2.0.1
  • H
Improper Handling of Alternate Encoding

<0:102.8.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.8.0-1.amzn2.0.1
  • H
Allocation of Resources Without Limits or Throttling

<0:102.8.0-1.amzn2.0.1
  • H
Incorrect Type Conversion or Cast

<0:102.8.0-1.amzn2.0.1
  • H
Use After Free

<0:102.8.0-1.amzn2.0.1
  • H
External Control of File Name or Path

<0:102.8.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:102.8.0-1.amzn2.0.1
  • H
CVE-2023-25731

<0:102.8.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:102.8.0-1.amzn2.0.1
  • H
Incorrect Synchronization

<0:102.8.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:102.8.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.8.0-1.amzn2.0.1
  • H
Incorrect Regular Expression

<0:102.7.1-1.amzn2.0.1
  • H
Information Exposure

<0:102.7.1-1.amzn2.0.1
  • H
Out-of-Bounds

<0:68.10.0-1.amzn2
  • H
Arbitrary Command Injection

<0:102.7.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.7.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.7.1-1.amzn2.0.1
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:102.7.1-1.amzn2.0.1
  • H
Use After Free

<0:102.7.1-1.amzn2.0.1
  • H
Information Exposure

<0:102.7.1-1.amzn2.0.1
  • H
CVE-2023-23602

<0:102.7.1-1.amzn2.0.1
  • H
Use After Free

<0:102.7.1-1.amzn2.0.1
  • H
Multiple Interpretations of UI Input

<0:102.7.1-1.amzn2.0.1
  • H
Improper Following of a Certificate's Chain of Trust

<0:68.10.0-1.amzn2
  • H
Out-of-Bounds

<0:102.7.1-1.amzn2.0.1
  • H
Use of Unmaintained Third Party Components

<0:102.7.1-1.amzn2.0.1
  • H
Insufficient UI Warning of Dangerous Operations

<0:102.7.1-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.7.1-1.amzn2.0.1
  • H
Truncation of Security-relevant Information

<0:102.7.1-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:102.7.1-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:102.7.1-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:102.7.1-1.amzn2.0.1
  • H
Return of Wrong Status Code

<0:102.7.1-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:102.7.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.7.1-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.7.1-1.amzn2.0.1
  • H
Use After Free

<0:102.7.1-1.amzn2.0.1
  • H
Out-of-Bounds

<0:102.7.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.7.1-1.amzn2.0.1
  • H
Use After Free

<0:68.10.0-1.amzn2
  • H
Information Exposure

<0:68.10.0-1.amzn2
  • H
Use After Free

<0:68.10.0-1.amzn2
  • H
Insufficient UI Warning of Dangerous Operations

<0:91.11.0-2.amzn2.0.1
  • H
Expected Behavior Violation

<0:102.4.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.4.0-1.amzn2.0.1
  • H
Resource Exhaustion

<0:102.4.0-1.amzn2.0.1
  • H
Improper Authentication

<0:102.4.0-1.amzn2.0.1
  • H
Reliance on Cookies without Validation and Integrity Checking in a Security Decision

<0:102.4.0-1.amzn2.0.1
  • H
Use After Free

<0:102.4.0-1.amzn2.0.1
  • H
Improper Authentication

<0:102.4.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.4.0-1.amzn2.0.1
  • H
Use After Free

<0:102.4.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.4.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.4.0-1.amzn2.0.1
  • H
Improper Authentication

<0:102.4.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.4.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:102.4.0-1.amzn2.0.1
  • H
Improper Handling of Inconsistent Structural Elements

<0:102.4.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.4.0-1.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:102.4.0-1.amzn2.0.1
  • H
Information Exposure

<0:102.4.0-1.amzn2.0.1
  • H
Improper Input Validation

<0:102.4.0-1.amzn2.0.1
  • H
Use After Free

<0:91.13.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.13.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.13.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:91.13.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.13.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.13.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.13.0-1.amzn2.0.1
  • H
Product UI does not Warn User of Unsafe Actions

<0:91.13.0-1.amzn2.0.1
  • H
Incorrect Permission Assignment for Critical Resource

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.11.0-2.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.11.0-2.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.11.0-2.amzn2.0.1
  • H
Use of Uninitialized Variable

<0:91.11.0-2.amzn2.0.1
  • H
Allocation of Resources Without Limits or Throttling

<0:91.11.0-2.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.11.0-2.amzn2.0.1
  • H
Acceptance of Extraneous Untrusted Data With Trusted Data

<0:91.11.0-2.amzn2.0.1
  • H
Buffer Overflow

<0:91.11.0-2.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • H
Cleartext Transmission of Sensitive Information

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Arbitrary Code Injection

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
NULL Pointer Dereference

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:91.9.1-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:91.9.1-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.8.0-1.amzn2.0.1
  • H
Time-of-check Time-of-use (TOCTOU)

<0:91.7.0-2.amzn2.0.1
  • H
Use After Free

<0:91.7.0-2.amzn2.0.1
  • H
Use After Free

<0:91.7.0-2.amzn2.0.1
  • H
The UI Performs the Wrong Action

<0:91.7.0-2.amzn2.0.1
  • H
Out-of-bounds Write

<0:91.7.0-2.amzn2.0.1
  • H
Use After Free

<0:91.8.0-1.amzn2.0.1
  • H
Resource Exhaustion

<0:91.8.0-1.amzn2.0.1
  • H
Use After Free

<0:91.8.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:91.8.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.8.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:91.8.0-1.amzn2.0.1
  • H
Improper Certificate Validation

<0:91.8.0-1.amzn2.0.1
  • H
Use After Free

<0:91.8.0-1.amzn2.0.1
  • H
Use After Free

<0:91.7.0-2.amzn2.0.1
  • H
Improper Preservation of Permissions

<0:91.7.0-2.amzn2.0.1
  • H
Inappropriate Encoding for Output Context

<0:91.7.0-2.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:91.7.0-2.amzn2.0.1
  • H
Incorrect Behavior Order: Early Validation

<0:91.7.0-2.amzn2.0.1
  • H
Incorrect Behavior Order: Early Validation

<0:91.7.0-2.amzn2.0.1
  • H
Arbitrary Code Injection

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
NULL Pointer Dereference

<0:91.6.0-1.amzn2.0.1
  • H
Use After Free

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:91.6.0-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:91.7.0-2.amzn2.0.1
  • H
Out-of-Bounds

<0:78.14.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:78.14.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:78.13.0-1.amzn2.0.1
  • H
Use After Free

<0:78.13.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:78.13.0-1.amzn2.0.1
  • H
Use After Free

<0:78.13.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:78.13.0-1.amzn2.0.1
  • H
Use After Free

<0:78.13.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:78.13.0-1.amzn2.0.1
  • H
Missing Initialization of Resource

<0:78.13.0-1.amzn2.0.1
  • H
Race Condition

<0:78.13.0-1.amzn2.0.1
  • H
Insufficient Verification of Data Authenticity

<0:78.13.0-1.amzn2.0.1
  • H
Insufficiently Protected Credentials

<0:78.11.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:78.11.0-1.amzn2.0.1
  • H
Improper Verification of Cryptographic Signature

<0:78.11.0-1.amzn2.0.1
  • H
Insufficient Verification of Data Authenticity

<0:78.10.0-1.amzn2.0.1
  • H
Improper Verification of Cryptographic Signature

<0:78.10.0-1.amzn2.0.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<0:78.10.0-1.amzn2.0.1
  • H
Improper Privilege Management

<0:78.10.0-1.amzn2.0.1
  • H
Incorrect Calculation

<0:78.10.0-1.amzn2.0.1
  • H
Time-of-check Time-of-use (TOCTOU)

<0:78.10.0-1.amzn2.0.1
  • H
Operation on a Resource after Expiration or Release

<0:78.10.0-1.amzn2.0.1
  • H
Arbitrary Argument Injection

<0:78.10.0-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<0:78.10.0-1.amzn2.0.1
  • H
CVE-2021-23991

<0:78.10.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:78.9.0-3.amzn2
  • H
Information Exposure

<0:78.10.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:78.10.0-1.amzn2.0.1
  • H
Out-of-Bounds

<0:78.9.0-3.amzn2
  • H
Authentication Bypass

<0:78.9.0-3.amzn2
  • H
Inadequate Encryption Strength

<0:78.9.0-3.amzn2
  • H
CVE-2021-23969

<0:78.8.0-1.amzn2
  • H
Information Exposure

<0:78.8.0-1.amzn2
  • H
Information Exposure

<0:78.8.0-1.amzn2
  • H
CVE-2021-23978

<0:78.8.0-1.amzn2
  • H
Out-of-Bounds

<0:78.7.0-1.amzn2
  • H
CVE-2020-26976

<0:78.7.0-1.amzn2
  • H
CVE-2021-23960

<0:78.7.0-1.amzn2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:78.7.0-1.amzn2
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<0:78.7.0-1.amzn2
  • H
CVE-2021-23953

<0:78.7.0-1.amzn2
  • C
Out-of-bounds Write

<0:78.6.1-1.amzn2
  • H
CVE-2020-16012

<0:78.6.0-1.amzn2
  • H
CVE-2020-26973

<0:78.6.0-1.amzn2
  • H
Cross-site Scripting (XSS)

<0:78.6.0-1.amzn2
  • H
Out-of-bounds Write

<0:78.6.0-1.amzn2
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:78.6.0-1.amzn2
  • H
Out-of-bounds Write

<0:78.6.0-1.amzn2
  • H
CVE-2020-26961

<0:78.6.0-1.amzn2
  • H
CVE-2020-26978

<0:78.6.0-1.amzn2
  • H
Out-of-bounds Write

<0:78.6.0-1.amzn2
  • H
Use After Free

<0:78.6.0-1.amzn2
  • H
CVE-2020-35111

<0:78.6.0-1.amzn2
  • H
Out-of-bounds Write

<0:78.6.0-1.amzn2
  • H
Use After Free

<0:78.6.0-1.amzn2
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:78.6.0-1.amzn2
  • H
Use of Uninitialized Resource

<0:78.6.0-1.amzn2
  • H
Cross-site Scripting (XSS)

<0:78.6.0-1.amzn2
  • H
Cross-site Scripting (XSS)

<0:78.6.0-1.amzn2
  • C
Use After Free

<0:78.4.3-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:78.4.3-1.amzn2.0.1
  • C
Use After Free

<0:78.4.3-1.amzn2.0.1
  • C
Use After Free

<0:78.4.3-1.amzn2.0.1
  • C
Cross-site Scripting (XSS)

<0:78.4.3-1.amzn2.0.1
  • C
Open Redirect

<0:78.4.3-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:78.4.3-1.amzn2.0.1
  • H
Incorrect Authorization

<0:68.12.0-1.amzn2
  • H
Use After Free

<0:68.12.0-1.amzn2
  • H
Out-of-bounds Write

<0:68.11.0-1.amzn2
  • H
Information Exposure

<0:68.11.0-1.amzn2
  • H
Out-of-bounds Write

<0:68.11.0-1.amzn2
  • H
Origin Validation Error

<0:68.11.0-1.amzn2
  • H
Out-of-bounds Write

<0:68.9.0-1.amzn2
  • H
Out-of-bounds Read

<0:68.9.0-1.amzn2
  • H
Race Condition

<0:68.9.0-1.amzn2
  • H
Use After Free

<0:68.9.0-1.amzn2
  • H
Improper Certificate Validation

<0:68.9.0-1.amzn2
  • H
Insufficient Verification of Data Authenticity

<0:68.9.0-1.amzn2
  • H
Race Condition

<0:68.9.0-1.amzn2
  • H
Out-of-bounds Write

<0:68.9.0-1.amzn2
  • H
Cleartext Transmission of Sensitive Information

<0:68.9.0-1.amzn2
  • C
Out-of-bounds Write

<0:68.8.0-1.amzn2
  • C
Out-of-bounds Write

<0:68.8.0-1.amzn2
  • C
Origin Validation Error

<0:68.8.0-1.amzn2
  • C
Race Condition

<0:68.8.0-1.amzn2
  • C
Out-of-bounds Write

<0:68.8.0-1.amzn2
  • C
Out-of-bounds Write

<0:68.8.0-1.amzn2
  • C
Use of Uninitialized Resource

<0:68.8.0-1.amzn2
  • C
Race Condition

<0:68.8.0-1.amzn2
  • C
Out-of-bounds Write

<0:68.8.0-1.amzn2
  • C
Directory Traversal

<0:68.8.0-1.amzn2
  • H
Out-of-bounds Read

<0:68.6.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.6.0-1.amzn2.0.1
  • H
OS Command Injection

<0:68.6.0-1.amzn2.0.1
  • H
Information Exposure

<0:68.6.0-1.amzn2.0.1
  • H
Use After Free

<0:68.6.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:68.6.0-1.amzn2.0.1
  • H
Cleartext Storage of Sensitive Information

<0:68.5.0-1.amzn2.0.1
  • H
Use After Free

<0:68.6.0-1.amzn2.0.1
  • H
Use of Uninitialized Resource

<0:68.5.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:68.5.0-1.amzn2.0.1
  • H
NULL Pointer Dereference

<0:68.5.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.5.0-1.amzn2.0.1
  • H
Use of Uninitialized Resource

<0:68.5.0-1.amzn2.0.1
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.4.1-2.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:68.4.1-2.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.4.1-2.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:68.4.1-2.amzn2.0.1
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.4.1-2.amzn2.0.1
  • H
Use After Free

<0:68.3.0-1.amzn2.0.1
  • H
Race Condition

<0:68.3.0-1.amzn2.0.1
  • H
Race Condition

<0:68.3.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.3.0-1.amzn2.0.1
  • H
Out-of-bounds Read

<0:68.2.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.2.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:68.2.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.3.0-1.amzn2.0.1
  • H
Origin Validation Error

<0:68.2.0-1.amzn2.0.1
  • H
Race Condition

<0:68.2.0-1.amzn2.0.1
  • H
Buffer Overflow

<0:68.2.0-1.amzn2.0.1
  • H
Use After Free

<0:68.2.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.2.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:68.2.0-1.amzn2.0.1
  • H
Use After Free

<0:60.9.0-1.amzn2.0.1
  • H
Out-of-bounds Write

<0:60.9.0-1.amzn2.0.1
  • H
Cleartext Transmission of Sensitive Information

<0:60.9.0-1.amzn2.0.1
  • H
Use After Free

<0:60.9.0-1.amzn2.0.1
  • H
Information Exposure

<0:60.9.0-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:60.9.0-1.amzn2.0.1
  • H
Cross-site Scripting (XSS)

<0:60.9.0-1.amzn2.0.1
  • C
CVE-2019-11730

<0:60.8.0-1.amzn2.0.1
  • C
CVE-2019-11711

<0:60.8.0-1.amzn2.0.1
  • C
Cross-site Scripting (XSS)

<0:60.8.0-1.amzn2.0.1
  • C
Arbitrary Code Injection

<0:60.8.0-1.amzn2.0.1
  • C
Use After Free

<0:60.8.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.8.0-1.amzn2.0.1
  • C
Improper Encoding or Escaping of Output

<0:60.8.0-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.7.2-2.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.7.2-2.amzn2.0.1
  • C
Improper Input Validation

<0:60.7.2-2.amzn2.0.1
  • C
Out-of-bounds Read

<0:60.7.2-2.amzn2.0.1
  • C
Out-of-bounds Read

<0:60.7.2-2.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.7.2-2.amzn2.0.1
  • C
Origin Validation Error

<0:60.7.0-1.amzn2.0.1
  • C
Improper Input Validation

<0:60.7.0-1.amzn2.0.1
  • C
Use After Free

<0:60.7.0-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.7.0-1.amzn2.0.1
  • C
Use After Free

<0:60.7.0-1.amzn2.0.1
  • C
Information Exposure

<0:60.7.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.7.0-1.amzn2.0.1
  • C
Use After Free

<0:60.7.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.7.0-1.amzn2.0.1
  • C
Origin Validation Error

<0:60.7.0-1.amzn2.0.1
  • C
Out-of-bounds Read

<0:60.7.0-1.amzn2.0.1
  • C
Use After Free

<0:60.7.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.6.1-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.6.1-1.amzn2.0.1
  • C
CVE-2018-18506

<0:60.6.1-1.amzn2.0.1
  • C
Out-of-Bounds

<0:60.6.1-1.amzn2.0.1
  • C
Reachable Assertion

<0:60.6.1-1.amzn2.0.1
  • C
Use After Free

<0:60.6.1-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.6.1-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.6.1-1.amzn2.0.1
  • C
Use After Free

<0:60.6.1-1.amzn2.0.1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.6.1-1.amzn2.0.1
  • C
Out-of-Bounds

<0:60.5.0-1.amzn2.0.1
  • C
Out-of-bounds Read

<0:60.5.0-1.amzn2.0.1
  • C
Use After Free

<0:60.5.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.5.0-1.amzn2.0.1
  • C
Out-of-Bounds

<0:60.5.0-1.amzn2.0.1
  • C
Origin Validation Error

<0:60.5.0-1.amzn2.0.1
  • C
Out-of-bounds Write

<0:60.2.1-4.amzn2.0.1
  • C
Out-of-Bounds

<0:60.2.1-4.amzn2.0.1
  • C
Out-of-Bounds

<0:60.2.1-4.amzn2.0.1
  • C
CVE-2018-12392

<0:60.2.1-4.amzn2.0.1
  • C
Information Exposure

<0:52.9.1-1.amzn2
  • C
Information Exposure

<0:52.9.1-1.amzn2
  • C
Out-of-bounds Read

<0:52.9.1-1.amzn2
  • C
Out-of-Bounds

<0:52.9.1-1.amzn2
  • C
Use After Free

<0:52.9.1-1.amzn2
  • C
Information Exposure

<0:52.9.1-1.amzn2
  • C
Information Exposure

<0:52.9.1-1.amzn2
  • C
Out-of-Bounds

<0:52.9.1-1.amzn2
  • C
Integer Overflow or Wraparound

<0:52.9.1-1.amzn2
  • C
Use After Free

<0:52.9.1-1.amzn2
  • C
Cross-site Request Forgery (CSRF)

<0:52.9.1-1.amzn2
  • C
Use After Free

<0:52.8.0-1.amzn2
  • C
Improper Input Validation

<0:52.8.0-1.amzn2
  • C
Out-of-Bounds

<0:52.8.0-1.amzn2
  • C
Inadequate Encryption Strength

<0:52.8.0-1.amzn2
  • C
Out-of-Bounds

<0:52.8.0-1.amzn2
  • C
CVE-2018-5168

<0:52.8.0-1.amzn2
  • C
Missing Encryption of Sensitive Data

<0:52.8.0-1.amzn2
  • C
Out-of-bounds Write

<0:52.8.0-1.amzn2
  • C
Use After Free

<0:52.8.0-1.amzn2
  • C
Out-of-Bounds

<0:52.8.0-1.amzn2
  • C
Improper Input Validation

<0:52.8.0-1.amzn2
  • C
Missing Encryption of Sensitive Data

<0:52.8.0-1.amzn2