firefox-x11 vulnerabilities (AlmaLinux)
638 vulnerabilities.
firefox-x11AlmaLinuxA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 Highfirefox-x11AlmaLinuxThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 Highfirefox-x11AlmaLinuxThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 Mediumfirefox-x11AlmaLinuxA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 Highfirefox-x11AlmaLinuxFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 Highfirefox-x11AlmaLinuxWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Mediumfirefox-x11AlmaLinuxThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 Highfirefox-x11AlmaLinuxRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 Mediumfirefox-x11AlmaLinuxWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 Highfirefox-x11AlmaLinuxOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 Highfirefox-x11AlmaLinuxThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 Mediumfirefox-x11AlmaLinuxIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 Mediumfirefox-x11AlmaLinuxOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 Mediumfirefox-x11AlmaLinuxAddress bar spoofing via bidirectional characters6.5 Mediumfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Criticalfirefox-x11AlmaLinuxDuring garbage collection extra operations were performed on a object that should not be. This...7.5 Highfirefox-x11AlmaLinuxA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 Mediumfirefox-x11AlmaLinuxDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 Highfirefox-x11AlmaLinuxIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-x11AlmaLinuxNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Mediumfirefox-x11AlmaLinuxVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 Highfirefox-x11AlmaLinuxElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 Criticalfirefox-x11AlmaLinuxDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 Mediumfirefox-x11AlmaLinuxA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 Mediumfirefox-x11AlmaLinuxDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 Highfirefox-x11AlmaLinuxBrowsing Context potentially not cleared when closing Private Window7.5 Highfirefox-x11AlmaLinuxXLL file extensions were downloadable without warnings4.3 Mediumfirefox-x11AlmaLinuxPush notifications saved to disk unencrypted6.5 Mediumfirefox-x11AlmaLinuxError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Mediumfirefox-x11AlmaLinuxMemory corruption in JIT UpdateRegExpStatics6.5 Mediumfirefox-x11AlmaLinuxMemory corruption in IPC FilePickerShownCallback6.5 Mediumfirefox-x11AlmaLinuxMemory corruption in IPC ColorPickerShownCallback6.5 Mediumfirefox-x11AlmaLinuxMemory corruption in IPC CanvasTranslator6.5 Mediumfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 Criticalfirefox-x11AlmaLinuxWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 Highfirefox-x11AlmaLinuxFull screen notification obscured by external program6.5 Mediumfirefox-x11AlmaLinuxFull screen notification obscured by file open dialog7.5 Highfirefox-x11AlmaLinuxIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 Highfirefox-x11AlmaLinuxRace conditions in reference counting code were found through code inspection. These could have...5.9 Mediumfirefox-x11AlmaLinuxAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 Highfirefox-x11AlmaLinuxA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-x11AlmaLinuxIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Mediumfirefox-x11AlmaLinuxOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Mediumfirefox-x11AlmaLinuxUse-after-free in workers8.8 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 High- Show moreLoading…