firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumfirefoxAlmaLinuxA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighfirefoxAlmaLinuxA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighfirefoxAlmaLinuxA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumfirefoxAlmaLinuxWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumfirefoxAlmaLinuxA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumfirefoxAlmaLinuxIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumfirefoxAlmaLinuxAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumfirefoxAlmaLinuxThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 MediumfirefoxAlmaLinux`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 MediumfirefoxAlmaLinuxMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighfirefoxAlmaLinuxThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighfirefoxAlmaLinuxA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighfirefoxAlmaLinuxThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighfirefoxAlmaLinuxThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumfirefoxAlmaLinuxA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighfirefoxAlmaLinuxFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighfirefoxAlmaLinuxWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumfirefoxAlmaLinuxThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighfirefoxAlmaLinuxRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumfirefoxAlmaLinuxWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighfirefoxAlmaLinuxOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighfirefoxAlmaLinuxThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumfirefoxAlmaLinuxIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumfirefoxAlmaLinuxOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumfirefoxAlmaLinuxAddress bar spoofing via bidirectional characters6.5 MediumfirefoxAlmaLinuxMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalfirefoxAlmaLinuxDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighfirefoxAlmaLinuxA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumfirefoxAlmaLinuxDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighfirefoxAlmaLinuxIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumfirefoxAlmaLinuxNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumfirefoxAlmaLinuxVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 HighfirefoxAlmaLinuxElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalfirefoxAlmaLinuxDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumfirefoxAlmaLinuxA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumfirefoxAlmaLinuxDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighfirefoxAlmaLinuxBrowsing Context potentially not cleared when closing Private Window7.5 HighfirefoxAlmaLinuxXLL file extensions were downloadable without warnings4.3 MediumfirefoxAlmaLinuxPush notifications saved to disk unencrypted6.5 MediumfirefoxAlmaLinuxError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumfirefoxAlmaLinuxMemory corruption in JIT UpdateRegExpStatics6.5 MediumfirefoxAlmaLinuxMemory corruption in IPC FilePickerShownCallback6.5 MediumfirefoxAlmaLinuxMemory corruption in IPC ColorPickerShownCallback6.5 MediumfirefoxAlmaLinuxMemory corruption in IPC CanvasTranslator6.5 MediumfirefoxAlmaLinuxMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Critical- Show moreLoading…