RHSA-2022:0127HighCVSS 9.6

Red Hat Security Advisory: thunderbird security update

Published
January 12, 2022
Last Modified
June 25, 2026

🔗 CVE IDs covered (12)

CVE-2022-22742 →CVE-2022-22747 →CVE-2022-22738 →CVE-2022-22741 →CVE-2022-22743 →CVE-2022-22745 →CVE-2022-22748 →CVE-2022-22751 →CVE-2021-4140 →CVE-2022-22737 →CVE-2022-22739 →CVE-2022-22740 →

📋 Description

CVE-2021-4140 — Mozilla: Iframe sandbox bypass with XSLT CVE-2022-22737 — Mozilla: Race condition when playing audio files CVE-2022-22738 — Mozilla: Heap-buffer-overflow in blendGaussianBlur CVE-2022-22739 — Mozilla: Missing throttling on external protocol launch dialog CVE-2022-22740 — Mozilla: Use-after-free of ChannelEventQueue::mOwner CVE-2022-22741 — Mozilla: Browser window spoof using fullscreen mode CVE-2022-22742 — Mozilla: Out-of-bounds memory access when inserting text in edit mode CVE-2022-22743 — Mozilla: Browser window spoof using fullscreen mode CVE-2022-22745 — Mozilla: Leaking cross-origin URLs through securitypolicyviolation event CVE-2022-22747 — Mozilla: Crash when handling empty pkcs7 sequence CVE-2022-22748 — Mozilla: Spoofed origin on external protocol launch dialog CVE-2022-22751 — Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5

🔗 References (15)