thunderbird

Direct Vulnerabilities

Known vulnerabilities in the thunderbird package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Out-of-bounds Write

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
Authentication Bypass

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-32205

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-32211

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-32212

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
Use of Uninitialized Resource

<1:102.11.0+build1-0ubuntu0.18.04.1
  • M
Improper Encoding or Escaping of Output

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
Resource Exhaustion

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-29535

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
Improper Certificate Validation

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-29550

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-29548

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-29533

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
NULL Pointer Dereference

<1:102.10.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.9.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-28164

<1:102.9.0+build1-0ubuntu0.18.04.1
  • M
Incorrect Type Conversion or Cast

<1:102.9.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-25751

<1:102.9.0+build1-0ubuntu0.18.04.1
  • M
CVE-2023-25752

<1:102.9.0+build1-0ubuntu0.18.04.1
  • M
Resource Exhaustion

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-0767

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-25728

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

*
  • M
Authentication Bypass

*
  • M
CVE-2023-25742

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-25729

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-25730

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-25740

*
  • M
CVE-2023-25734

*
  • M
Out-of-bounds Write

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
CVE-2023-25737

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.8.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Improper Encoding or Escaping of Output

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2023-23600

*
  • M
CVE-2023-23598

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Origin Validation Error

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Improper Check for Unusual or Exceptional Conditions

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2023-23603

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-46872

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-46877

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

*
  • M
CVE-2022-46871

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-46874

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-45414

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Information Exposure

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Improper Restriction of Rendered UI Layers or Frames

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Link Following

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Cross-site Scripting (XSS)

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-45410

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Improper Restriction of Rendered UI Layers or Frames

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-45408

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
CVE-2022-45404

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Information Exposure

<1:102.7.1+build2-0ubuntu0.18.04.1
  • M
Origin Validation Error

<1:102.4.2+build2-0ubuntu0.18.04.1
  • M
NULL Pointer Dereference

<1:102.4.2+build2-0ubuntu0.18.04.1
  • M
CVE-2022-42929

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Cleartext Storage of Sensitive Information

<1:102.4.2+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Improper Authentication

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
CVE-2022-39236

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Improper Authentication

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Improper Authentication

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Insecure Storage of Sensitive Information

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Arbitrary Code Injection

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
CVE-2022-40957

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:102.4.2+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:102.4.2+build2-0ubuntu0.18.04.1
  • M
Externally Controlled Reference to a Resource in Another Sphere

<1:102.2.2+build1-0ubuntu0.18.04.1
  • M
Improper Restriction of Rendered UI Layers or Frames

<1:102.2.2+build1-0ubuntu0.18.04.1
  • M
Cross-site Scripting (XSS)

<1:102.2.2+build1-0ubuntu0.18.04.1
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:102.2.2+build1-0ubuntu0.18.04.1
  • M
Use After Free

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Improper Preservation of Permissions

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
Race Condition

<1:102.2.2+build1-0ubuntu0.18.04.1
  • L
CVE-2022-36319

<1:102.2.2+build1-0ubuntu0.18.04.1
  • M
Authentication Bypass

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-34472

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-34468

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-34479

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Integer Overflow or Wraparound

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-31742

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Authentication Bypass

<1:91.11.0+build2-0ubuntu0.18.04.1
  • M
Improper Certificate Validation

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Use of Uninitialized Resource

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-31740

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-31736

<1:91.11.0+build2-0ubuntu0.18.04.1
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
CVE-2022-1520

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.9.1+build1-0ubuntu0.18.04.1
  • M
CVE-2022-29913

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
CVE-2022-29914

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
CVE-2022-29916

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Open Redirect

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Incorrect Default Permissions

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.9.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.8.1+build1-0ubuntu0.18.04.1
  • M
Improper Certificate Validation

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.8.1+build1-0ubuntu0.18.04.1
  • M
Inefficient Regular Expression Complexity

<1:91.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-26386

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-26383

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-26384

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
Time-of-check Time-of-use (TOCTOU)

<1:91.7.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-22763

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-22756

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
Incorrect Authorization

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-22759

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
Information Exposure

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
CVE-2022-22761

<1:91.7.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2022-22748

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Race Condition

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2022-22743

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2022-22745

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2022-22741

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2022-22739

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Improper Certificate Validation

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
XML Injection

<1:91.5.0+build1-0ubuntu0.18.04.1
  • M
CVE-2021-4126

<1:91.5.0+build1-0ubuntu0.18.04.1
  • M
Out-of-Bounds

<1:91.5.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Excessive Iteration

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2021-43541

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Incorrect Type Conversion or Cast

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Race Condition

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Improper Privilege Management

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:91.5.0+build1-0ubuntu0.18.04.1
  • H
Out-of-bounds Write

<1:78.14.0+build1-0ubuntu0.18.04.2
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Incorrect Authorization

<1:91.5.0+build1-0ubuntu0.18.04.1
  • M
CVE-2021-38502

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2021-38500

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2021-38501

<1:91.5.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.14.0+build1-0ubuntu0.18.04.1
  • L
HTTP Request Smuggling

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2021-29984

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Excessive Authentication Attempts

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Interpretation Conflict

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Missing Release of Resource after Effective Lifetime

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
CVE-2021-29981

<1:91.5.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Missing Initialization of Resource

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Race Condition

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.13.0+build1-0ubuntu0.18.04.1
  • M
Files or Directories Accessible to External Parties

<1:78.13.0+build1-0ubuntu0.18.04.1
  • M
Cleartext Storage of Sensitive Information

<1:78.11.0+build1-0ubuntu0.18.04.2
  • M
CVE-2021-29957

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Out-of-bounds Write

<1:78.13.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:78.11.0+build1-0ubuntu0.18.04.2
  • M
CVE-2021-23991

<1:78.11.0+build1-0ubuntu0.18.04.2
  • M
Improper Verification of Cryptographic Signature

<1:78.11.0+build1-0ubuntu0.18.04.2
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Uncontrolled Search Path Element

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Race Condition

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Cleartext Storage of Sensitive Information

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Incorrect Calculation

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Integer Overflow or Wraparound

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Missing Initialization of Resource

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Operation on a Resource after Expiration or Release

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Insufficient Verification of Data Authenticity

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Arbitrary Argument Injection

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Improper Privilege Management

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Authentication Bypass

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Inadequate Encryption Strength

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Information Exposure

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2021-23978

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2021-23969

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
Arbitrary Command Injection

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2021-23953

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2021-23960

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2021-23961

<1:78.11.0+build1-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-26973

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-35111

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-26976

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-26978

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-16012

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
CVE-2020-26961

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Improper Cross-boundary Removal of Sensitive Data

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
CVE-2020-15683

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Open Redirect

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Release of Invalid Pointer or Reference

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Release of Invalid Pointer or Reference

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Incorrect Authorization

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Improper Restriction of Rendered UI Layers or Frames

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
CVE-2020-15653

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Improper Check for Unusual or Exceptional Conditions

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
Insufficiently Protected Credentials

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
CVE-2020-6514

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Incorrect Default Permissions

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Incorrect Default Permissions

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:78.8.1+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Improper Certificate Validation

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.10.0+build1-0ubuntu0.18.04.1
  • M
Missing Encryption of Sensitive Data

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Insufficient Verification of Data Authenticity

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:78.8.1+build1-0ubuntu0.18.04.1
  • M
Information Exposure

<1:68.10.0+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:68.8.0+build2-0ubuntu0.18.04.2
  • L
Race Condition

<1:68.8.0+build2-0ubuntu0.18.04.2
  • L
Buffer Overflow

<1:68.8.0+build2-0ubuntu0.18.04.2
  • L
Information Exposure

<1:68.8.0+build2-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:68.8.0+build2-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Use After Free

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Double Free

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Arbitrary Code Injection

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Missing Initialization of Resource

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Insufficiently Protected Credentials

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<1:68.7.0+build1-0ubuntu0.18.04.1
  • M
NULL Pointer Dereference

<1:68.7.0+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Buffer Overflow

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Buffer Overflow

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Buffer Overflow

<1:68.4.1+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:68.4.1+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Race Condition

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Buffer Overflow

<1:68.2.1+build1-0ubuntu0.18.04.1
  • M
Improper Verification of Cryptographic Signature

<1:68.2.1+build1-0ubuntu0.18.04.1
  • M
Cleartext Transmission of Sensitive Information

<1:60.9.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<1:68.2.1+build1-0ubuntu0.18.04.1
  • L
Information Exposure

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Inclusion of Functionality from Untrusted Control Sphere

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:60.9.0+build1-0ubuntu0.18.04.1
  • L
Arbitrary Code Injection

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Cross-site Request Forgery (CSRF)

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Cross-site Scripting (XSS)

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
CVE-2019-11730

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Improper Encoding or Escaping of Output

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
CVE-2019-11711

<1:60.8.0+build1-0ubuntu0.18.04.1
  • L
Improper Input Validation

<1:60.7.2+build2-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:60.7.2+build1-0ubuntu0.18.04.1
  • M
Out-of-Bounds

<1:60.7.1+build1-0ubuntu0.18.04.1
  • M
Out-of-Bounds

<1:60.7.1+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:60.7.1+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:60.7.1+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Improper Input Validation

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Improper Input Validation

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Reachable Assertion

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Improper Input Validation

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:60.7.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Read

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:60.2.1+build1-0ubuntu0.18.04.2
  • M
Improper Verification of Cryptographic Signature

<1:60.5.1+build2-0ubuntu0.18.04.1
  • L
Information Exposure

<1:60.7.0+build1-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:60.5.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:60.7.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.5.1+build2-0ubuntu0.18.04.1
  • L
Improper Authentication

<1:60.5.1+build2-0ubuntu0.18.04.1
  • M
Use After Free

<1:60.5.1+build2-0ubuntu0.18.04.1
  • M
CVE-2018-18506

<1:60.6.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Origin Validation Error

<1:60.4.0+build2-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:60.5.1+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
CVE-2018-12392

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Improper Input Validation

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Improper Input Validation

<1:60.4.0+build2-0ubuntu0.18.04.1
  • L
Incorrect Type Conversion or Cast

<1:60.4.0+build2-0ubuntu0.18.04.1
  • M
Insufficiently Protected Credentials

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Use After Free

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Out-of-Bounds

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Use After Free

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Information Exposure

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Cross-site Request Forgery (CSRF)

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Use After Free

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Use After Free

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Out-of-bounds Read

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Integer Overflow or Wraparound

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Information Exposure

<1:52.9.1+build3-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.9.1+build3-0ubuntu0.18.04.1
  • M
Information Exposure

<1:52.9.1+build3-0ubuntu0.18.04.1
  • M
Information Exposure

<1:52.9.1+build3-0ubuntu0.18.04.1
  • M
Out-of-bounds Write

<1:60.2.1+build1-0ubuntu0.18.04.2
  • L
Out-of-bounds Write

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • L
Integer Overflow or Wraparound

<1:52.7.0+build1-0ubuntu1
  • M
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
CVE-2018-5117

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Improper Input Validation

<1:52.4.0+build1-0ubuntu2
  • M
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
Integer Overflow or Wraparound

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • M
Missing Encryption of Sensitive Data

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.2.1+build1-0ubuntu1
  • L
Use After Free

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.7.0+build1-0ubuntu1
  • M
Inadequate Encryption Strength

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-bounds Write

<1:52.7.0+build1-0ubuntu1
  • L
Out-of-Bounds

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Improper Privilege Management

<1:52.4.0+build1-0ubuntu2
  • L
Out-of-Bounds

<1:52.7.0+build1-0ubuntu1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
Out-of-bounds Read

<1:52.4.0+build1-0ubuntu2
  • L
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • M
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
CVE-2018-5168

<1:52.8.0+build1-0ubuntu0.18.04.1
  • M
Improper Input Validation

<1:52.8.0+build1-0ubuntu0.18.04.1
  • M
Out-of-Bounds

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.8.0+build1-0ubuntu0.18.04.1
  • M
Missing Encryption of Sensitive Data

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Cross-site Scripting (XSS)

<1:52.4.0+build1-0ubuntu2
  • L
Improper Input Validation

<1:52.4.0+build1-0ubuntu2
  • M
Improper Input Validation

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • L
CVE-2017-7830

<1:52.6.0+build1-0ubuntu1
  • L
Out-of-Bounds

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.6.0+build1-0ubuntu1
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Use After Free

<1:52.4.0+build1-0ubuntu2
  • L
Information Exposure

<1:52.4.0+build1-0ubuntu2
  • L
Out-of-Bounds

<1:52.4.0+build1-0ubuntu2
  • M
Out-of-bounds Write

<1:52.7.0+build1-0ubuntu1
  • L
Improper Input Validation

<1:52.4.0+build1-0ubuntu2
  • L
Out-of-Bounds

<1:52.6.0+build1-0ubuntu1
  • L
Out-of-Bounds

<1:52.7.0+build1-0ubuntu1
  • M
CVE-2017-17689

<1:52.8.0+build1-0ubuntu0.18.04.1
  • L
Use After Free

<1:60.5.1+build2-0ubuntu0.18.04.1
  • L
Improper Data Handling

<1:38.6.0+build1-0ubuntu1
  • L
Cryptographic Issues

<1:31.8.0+build1-0ubuntu1