firefox-x11 vulnerabilities (AlmaLinux)
638 vulnerabilities.
firefox-x11AlmaLinuxWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 Highfirefox-x11AlmaLinuxA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Mediumfirefox-x11AlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-x11AlmaLinuxAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Criticalfirefox-x11AlmaLinuxThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowfirefox-x11AlmaLinuxMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highfirefox-x11AlmaLinuxWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highfirefox-x11AlmaLinuxAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumfirefox-x11AlmaLinuxA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumfirefox-x11AlmaLinuxA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highfirefox-x11AlmaLinuxAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumfirefox-x11AlmaLinuxIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumfirefox-x11AlmaLinuxMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highfirefox-x11AlmaLinuxA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumfirefox-x11AlmaLinuxFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highfirefox-x11AlmaLinuxWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highfirefox-x11AlmaLinuxAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highfirefox-x11AlmaLinuxFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumfirefox-x11AlmaLinuxA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumfirefox-x11AlmaLinuxUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Mediumfirefox-x11AlmaLinuxMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highfirefox-x11AlmaLinuxDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumfirefox-x11AlmaLinuxWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highfirefox-x11AlmaLinuxWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumfirefox-x11AlmaLinuxSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumfirefox-x11AlmaLinuxA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 Highfirefox-x11AlmaLinuxMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 Highfirefox-x11AlmaLinuxMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-x11AlmaLinuxWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumfirefox-x11AlmaLinuxModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 Highfirefox-x11AlmaLinuxAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 Highfirefox-x11AlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-x11AlmaLinuxWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 Highfirefox-x11AlmaLinuxA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 Mediumfirefox-x11AlmaLinuxPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 Highfirefox-x11AlmaLinuxThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 Mediumfirefox-x11AlmaLinuxAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 High