firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumfirefoxAlmaLinuxRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumfirefoxAlmaLinuxAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumfirefoxAlmaLinuxDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighfirefoxAlmaLinuxMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighfirefoxAlmaLinuxDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumfirefoxAlmaLinuxWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumfirefoxAlmaLinuxBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumfirefoxAlmaLinuxIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighfirefoxAlmaLinuxAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumfirefoxAlmaLinux<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumfirefoxAlmaLinuxWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighfirefoxAlmaLinuxPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumfirefoxAlmaLinuxIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalfirefoxAlmaLinuxWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumfirefoxAlmaLinuxAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighfirefoxAlmaLinuxRegular expression denial of service in Rust's regex crate7.5 HighfirefoxAlmaLinuxAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalfirefoxAlmaLinuxRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighfirefoxAlmaLinuxIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalfirefoxAlmaLinuxxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalfirefoxAlmaLinuxxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalfirefoxAlmaLinuxMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxAlmaLinuxWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighfirefoxAlmaLinuxWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighfirefoxAlmaLinuxWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumfirefoxAlmaLinuxIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalfirefoxAlmaLinuxIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighfirefoxAlmaLinuxIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumfirefoxAlmaLinuxMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighfirefoxAlmaLinuxMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxAlmaLinuxAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxAlmaLinuxSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxAlmaLinuxWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxAlmaLinuxWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxAlmaLinuxWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxAlmaLinuxCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxAlmaLinuxMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxAlmaLinuxApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxAlmaLinuxConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxAlmaLinuxIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalfirefoxAlmaLinuxIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumfirefoxAlmaLinuxUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumfirefoxAlmaLinuxDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumfirefoxAlmaLinuxUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumfirefoxAlmaLinuxWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumfirefoxAlmaLinuxFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighfirefoxAlmaLinuxBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumfirefoxAlmaLinuxAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighfirefoxAlmaLinuxUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Medium- Show moreLoading…