firefox-x11 vulnerabilities (AlmaLinux)
638 vulnerabilities.
firefox-x11AlmaLinuxUninitialized memory in the JavaScript Engine component6.5 Mediumfirefox-x11AlmaLinuxSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highfirefox-x11AlmaLinuxSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-x11AlmaLinuxIncorrect JavaScript state machine for generators6.5 Mediumfirefox-x11AlmaLinuxXSLT documents could bypass CSP8.1 Highfirefox-x11AlmaLinuxIncorrect URL stripping in CSP reports9.8 Criticalfirefox-x11AlmaLinuxPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-x11AlmaLinuxjavascript: URLs executed on object and embed tags8.1 Highfirefox-x11AlmaLinuxLarge branch table could lead to truncated instruction9.8 Criticalfirefox-x11AlmaLinuxJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-x11AlmaLinuxContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-x11AlmaLinuxIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-x11AlmaLinuxThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-x11AlmaLinuxUse-after-free in FontFaceSet9.8 Criticalfirefox-x11AlmaLinuxMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-x11AlmaLinuxClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-x11AlmaLinuxScript element events leaked cross-origin resource status4.3 Mediumfirefox-x11AlmaLinuxPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-x11AlmaLinuxError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-x11AlmaLinuxOut-of-bounds access when optimizing linear sums8.8 Highfirefox-x11AlmaLinuxOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-x11AlmaLinuxMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-x11AlmaLinuxUnsafe attribute access during XPath parsing4.8 Mediumfirefox-x11AlmaLinuxProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-x11AlmaLinuxPrivilege escalation in Thunderbird Updater8.8 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-x11AlmaLinuxURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-x11AlmaLinuxUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-x11AlmaLinuxAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-x11AlmaLinuxClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-x11AlmaLinuxUnexpected GC during RegExp bailout processing6.5 Mediumfirefox-x11AlmaLinuxJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highfirefox-x11AlmaLinuxInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highfirefox-x11AlmaLinuxUse-after-free in WebTransportChild7.5 Highfirefox-x11AlmaLinuxAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 Highfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalfirefox-x11AlmaLinuxCertificate length was not properly checked8.8 Highfirefox-x11AlmaLinuxPotential opening of private browsing tabs in normal browsing windows6.5 Mediumfirefox-x11AlmaLinuxUse-after-free during concurrent delazification7.5 Highfirefox-x11AlmaLinuxA bug in WebAssembly code generation could result in a crash8.8 Highfirefox-x11AlmaLinuxUse-after-free in Custom Highlight8.8 Highfirefox-x11AlmaLinuxUse-after-free in XSLT9.8 Criticalfirefox-x11AlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Medium- Show moreLoading…