firefox-x11 vulnerabilities (AlmaLinux)
638 vulnerabilities.
firefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumfirefox-x11AlmaLinuxMemory corruption when using JavaScript Text Segmentation7.7 Highfirefox-x11AlmaLinuxCompartment mismatch when parsing JavaScript JSON module4.0 Mediumfirefox-x11AlmaLinuxAlt-Svc ALPN validation failure when redirected4.0 Mediumfirefox-x11AlmaLinuxUse-after-free when breaking lines in text5.3 Mediumfirefox-x11AlmaLinuxWebChannel APIs susceptible to confused deputy attack5.4 Mediumfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highfirefox-x11AlmaLinuxWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highfirefox-x11AlmaLinuxThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumfirefox-x11AlmaLinuxA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumfirefox-x11AlmaLinuxEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumfirefox-x11AlmaLinuxAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highfirefox-x11AlmaLinuxBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highfirefox-x11AlmaLinuxA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumfirefox-x11AlmaLinuxRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumfirefox-x11AlmaLinuxVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumfirefox-x11AlmaLinuxTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumfirefox-x11AlmaLinuxIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumfirefox-x11AlmaLinuxThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumfirefox-x11AlmaLinuxAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highfirefox-x11AlmaLinuxA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highfirefox-x11AlmaLinuxAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalfirefox-x11AlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-x11AlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-x11AlmaLinuxA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalfirefox-x11AlmaLinuxIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediumfirefox-x11AlmaLinuxA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalfirefox-x11AlmaLinuxThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalfirefox-x11AlmaLinuxFirefox normally asks for confirmation before asking the operating system to find an application...7.5 Highfirefox-x11AlmaLinuxInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highfirefox-x11AlmaLinuxA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalfirefox-x11AlmaLinuxThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Mediumfirefox-x11AlmaLinuxIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 Highfirefox-x11AlmaLinuxUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 Highfirefox-x11AlmaLinuxANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Mediumfirefox-x11AlmaLinuxIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 Highfirefox-x11AlmaLinuxFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 Mediumfirefox-x11AlmaLinuxEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 Highfirefox-x11AlmaLinuxIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 Highfirefox-x11AlmaLinuxA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 Highfirefox-x11AlmaLinuxInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Criticalfirefox-x11AlmaLinuxSelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 Mediumfirefox-x11AlmaLinuxType Confusion in Async Generators in Javascript Engine7.5 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 Highfirefox-x11AlmaLinuxMemory corruption in thread creation7.4 Highfirefox-x11AlmaLinuxRace condition in permission assignment4.7 Medium- Show moreLoading…