Read Time:36 Second

Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass security restrictions, cross-site
tracing, or execute arbitrary code. (CVE-2023-25152, CVE-2023-28162,
CVE-2023-28176)

Lukas Bernhard discovered that Thunderbird did not properly manage memory
when invalidating JIT code while following an iterator. An attacker could
potentially exploits this issue to cause a denial of service.
(CVE-2023-25751)

Luan Herrera discovered that Thunderbird did not properly manage
cross-origin iframe when dragging a URL. An attacker could potentially
exploit this issue to perform spoofing attacks. (CVE-2023-28164)

Read More

More Stories

chromium-124.0.6367.60-1.fc38

FEDORA-2024-5d8f4f86b0 Packages in this update: chromium-124.0.6367.60-1.fc38 Update description: update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object...

chromium-124.0.6367.60-1.fc39

FEDORA-2024-12edb9dec8 Packages in this update: chromium-124.0.6367.60-1.fc39 Update description: update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object...

python-idna-3.7-1.fc38

FEDORA-2024-73644489ec Packages in this update: python-idna-3.7-1.fc38 Update description: Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651 Read More

python-idna-3.7-1.fc39

FEDORA-2024-9176fdb518 Packages in this update: python-idna-3.7-1.fc39 Update description: Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651 Read More

glibc-2.37-19.fc38

FEDORA-2024-f7ae5df88d Packages in this update: glibc-2.37-19.fc38 Update description: This update includes several bug fixes from the upstream glibc release branch,...

Generated by Feedzy