firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalfirefoxAlmaLinuxWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighfirefoxAlmaLinuxFull screen notification obscured by external program6.5 MediumfirefoxAlmaLinuxFull screen notification obscured by file open dialog7.5 HighfirefoxAlmaLinuxIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighfirefoxAlmaLinuxRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumfirefoxAlmaLinuxAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighfirefoxAlmaLinuxA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighfirefoxAlmaLinuxIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumfirefoxAlmaLinuxOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumfirefoxAlmaLinuxUse-after-free in workers8.8 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighfirefoxAlmaLinuxWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighfirefoxAlmaLinuxA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumfirefoxAlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighfirefoxAlmaLinuxAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalfirefoxAlmaLinuxThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowfirefoxAlmaLinuxMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighfirefoxAlmaLinuxWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighfirefoxAlmaLinuxAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumfirefoxAlmaLinuxA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumfirefoxAlmaLinuxA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighfirefoxAlmaLinuxAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumfirefoxAlmaLinuxIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumfirefoxAlmaLinuxMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighfirefoxAlmaLinuxA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumfirefoxAlmaLinuxFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighfirefoxAlmaLinuxWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighfirefoxAlmaLinuxAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighfirefoxAlmaLinuxFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumfirefoxAlmaLinuxA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumfirefoxAlmaLinuxUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumfirefoxAlmaLinuxMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighfirefoxAlmaLinuxDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumfirefoxAlmaLinuxWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighfirefoxAlmaLinuxWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumfirefoxAlmaLinuxSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumfirefoxAlmaLinuxA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighfirefoxAlmaLinuxMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighfirefoxAlmaLinuxMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxAlmaLinuxWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumfirefoxAlmaLinuxModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighfirefoxAlmaLinuxAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighfirefoxAlmaLinuxCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighfirefoxAlmaLinuxWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighfirefoxAlmaLinuxA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumfirefoxAlmaLinuxPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighfirefoxAlmaLinuxThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumfirefoxAlmaLinuxAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 High- Show moreLoading…