VDB

GCVE-110-MAGEIA-2022-253

GCVE-110-MAGEIA-2022-253
Advisory Published
Vulnetix · Advisory published July 5, 2022
A popup window could be resized in a way to overlay the address bar with web content. (CVE-2022-34479) Use-after-free in nsSHistory. (CVE-2022-34470) CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI. (CVE-2022-34468) An email with a mismatching OpenPGP signature date was accepted as valid. (CVE-2022-2226) Potential integer overflow in ReplaceElementsAt. (CVE-2022-34481) CSP bypass enabling stylesheet injection. (CVE-2022-31744) Unavailable PAC file resulted in OCSP requests being blocked. (CVE-2022-34472) Undesired attributes could be set as part of prototype pollution. (CVE-2022-2200) Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird 102. (CVE-2022-34484)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiathunderbird-l10n0 (affected), 91.11.0-1.mga8 (unaffected)—
Mageiathunderbird0 (affected), 91.11.0-1.mga8 (unaffected)—

References

Updated thunderbird packages fix security vulnerability
advisory
Updated thunderbird packages fix security vulnerability
issue
Updated thunderbird packages fix security vulnerability
issue
Updated thunderbird packages fix security vulnerability
issue

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›