firefox-x11 vulnerabilities (AlmaLinux)
638 vulnerabilities.
firefox-x11AlmaLinuxMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 Highfirefox-x11AlmaLinuxBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 Highfirefox-x11AlmaLinuxOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Mediumfirefox-x11AlmaLinuxBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Mediumfirefox-x11AlmaLinuxBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Mediumfirefox-x11AlmaLinuxIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 Highfirefox-x11AlmaLinuxWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 Highfirefox-x11AlmaLinuxWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 Mediumfirefox-x11AlmaLinuxA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Mediumfirefox-x11AlmaLinuxIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 Mediumfirefox-x11AlmaLinuxPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 Highfirefox-x11AlmaLinuxMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 Highfirefox-x11AlmaLinuxIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Mediumfirefox-x11AlmaLinuxOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Mediumfirefox-x11AlmaLinuxThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 Highfirefox-x11AlmaLinuxIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 Highfirefox-x11AlmaLinuxGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 Highfirefox-x11AlmaLinuxAn attacker was able to inject an event handler into a privileged object that would allow...8.4 Highfirefox-x11AlmaLinuxTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 Lowfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 Highfirefox-x11AlmaLinuxIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 Highfirefox-x11AlmaLinuxA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Mediumfirefox-x11AlmaLinuxUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Mediumfirefox-x11AlmaLinuxThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Mediumfirefox-x11AlmaLinux`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 Highfirefox-x11AlmaLinuxReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 Highfirefox-x11AlmaLinuxIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 Highfirefox-x11AlmaLinuxSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Mediumfirefox-x11AlmaLinuxA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Mediumfirefox-x11AlmaLinuxIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Mediumfirefox-x11AlmaLinuxA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Mediumfirefox-x11AlmaLinuxThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Mediumfirefox-x11AlmaLinuxWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 Highfirefox-x11AlmaLinuxAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 Highfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 Highfirefox-x11AlmaLinuxIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Mediumfirefox-x11AlmaLinuxA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 Highfirefox-x11AlmaLinuxA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-x11AlmaLinuxA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Mediumfirefox-x11AlmaLinuxWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 Mediumfirefox-x11AlmaLinuxA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 Mediumfirefox-x11AlmaLinuxIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-x11AlmaLinuxAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 Mediumfirefox-x11AlmaLinuxThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 Mediumfirefox-x11AlmaLinux`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 Mediumfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 Highfirefox-x11AlmaLinuxThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 High- Show moreLoading…