Popis
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface.
Below is a complete list of vulnerabilities:
- Use after free vulnerability in text reflows can be exploited via special crafted SVG object to cause denial of service.
- Security vulnerability in iframe sandboxed with allow-popups can be exploited to execute arbitrary code.
- Security vulnerability in verifying add-on signatures can be exploited to bypass security restrictions.
- Security vulnerability in download temporary files for macOS and Linux can be exploited to bypass security restrictions.
- Security UI vulnerability in fullscreen mode can be exploited to spoof user interface,
Oficiální doporučení
Vykořisťování
Public exploits exist for this vulnerability.
Související produkty
seznam CVE
- CVE-2022-26383 warning
- CVE-2022-26384 critical
- CVE-2022-26381 critical
- CVE-2022-26387 critical
- CVE-2022-26386 high
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!