firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighfirefoxAlmaLinuxCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumfirefoxAlmaLinuxContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumfirefoxAlmaLinuxURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumfirefoxAlmaLinuxMalicious command could be hidden in devtools output on Windows6.5 MediumfirefoxAlmaLinuxArbitrary file read from GTK drag and drop on Linux6.5 MediumfirefoxAlmaLinuxBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumfirefoxAlmaLinuxAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighfirefoxAlmaLinuxA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalfirefoxAlmaLinuxAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighfirefoxAlmaLinuxA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumfirefoxAlmaLinuxMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighfirefoxAlmaLinuxA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighfirefoxAlmaLinuxAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighfirefoxAlmaLinuxMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighfirefoxAlmaLinuxUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumfirefoxAlmaLinuxIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumfirefoxAlmaLinuxKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumfirefoxAlmaLinuxWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighfirefoxAlmaLinuxCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumfirefoxAlmaLinuxWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumfirefoxAlmaLinuxThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighfirefoxAlmaLinuxThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumfirefoxAlmaLinuxIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalfirefoxAlmaLinuxFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumfirefoxAlmaLinuxThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumfirefoxAlmaLinuxService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumfirefoxAlmaLinuxMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxAlmaLinuxIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumfirefoxAlmaLinuxCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighfirefoxAlmaLinuxA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighfirefoxAlmaLinuxInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumfirefoxAlmaLinuxMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighfirefoxAlmaLinuxConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumfirefoxAlmaLinuxDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumfirefoxAlmaLinuxBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumfirefoxAlmaLinuxWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumfirefoxAlmaLinuxlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighfirefoxAlmaLinuxMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighfirefoxAlmaLinuxMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxAlmaLinuxA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighfirefoxAlmaLinuxA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighfirefoxAlmaLinuxAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumfirefoxAlmaLinuxMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighfirefoxAlmaLinuxWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighfirefoxAlmaLinuxWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumfirefoxAlmaLinuxIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighfirefoxAlmaLinuxAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighfirefoxAlmaLinuxMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalfirefoxAlmaLinuxFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 Medium- Show moreLoading…