firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxUse-after-free in Custom Highlight8.8 HighfirefoxAlmaLinuxUse-after-free in XSLT9.8 CriticalfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumfirefoxAlmaLinuxMemory corruption when using JavaScript Text Segmentation7.7 HighfirefoxAlmaLinuxCompartment mismatch when parsing JavaScript JSON module4.0 MediumfirefoxAlmaLinuxAlt-Svc ALPN validation failure when redirected4.0 MediumfirefoxAlmaLinuxUse-after-free when breaking lines in text5.3 MediumfirefoxAlmaLinuxWebChannel APIs susceptible to confused deputy attack5.4 MediumfirefoxAlmaLinuxidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 MediumfirefoxAlmaLinuxMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighfirefoxAlmaLinuxWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighfirefoxAlmaLinuxThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumfirefoxAlmaLinuxA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumfirefoxAlmaLinuxEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumfirefoxAlmaLinuxAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumfirefoxAlmaLinuxMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighfirefoxAlmaLinuxBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighfirefoxAlmaLinuxA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumfirefoxAlmaLinuxRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumfirefoxAlmaLinuxVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumfirefoxAlmaLinuxTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumfirefoxAlmaLinuxIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumfirefoxAlmaLinuxThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumfirefoxAlmaLinuxAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighfirefoxAlmaLinuxA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighfirefoxAlmaLinuxAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalfirefoxAlmaLinuxMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalfirefoxAlmaLinuxMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalfirefoxAlmaLinuxA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighfirefoxAlmaLinuxA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighfirefoxAlmaLinuxBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumfirefoxAlmaLinuxA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumfirefoxAlmaLinuxIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighfirefoxAlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighfirefoxAlmaLinuxAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighfirefoxAlmaLinuxA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalfirefoxAlmaLinuxAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 HighfirefoxAlmaLinuxMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalfirefoxAlmaLinuxIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumfirefoxAlmaLinuxA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalfirefoxAlmaLinuxThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalfirefoxAlmaLinuxFirefox normally asks for confirmation before asking the operating system to find an application...7.5 HighfirefoxAlmaLinuxInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighfirefoxAlmaLinuxA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalfirefoxAlmaLinuxThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumfirefoxAlmaLinuxIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighfirefoxAlmaLinuxUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighfirefoxAlmaLinuxANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Medium- Show moreLoading…