firefox vulnerabilities (AlmaLinux)
838 vulnerabilities.
firefoxAlmaLinuxDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighfirefoxAlmaLinuxUninitialized memory in the JavaScript Engine component6.5 MediumfirefoxAlmaLinuxSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighfirefoxAlmaLinuxSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalfirefoxAlmaLinuxMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxAlmaLinuxIncorrect JavaScript state machine for generators6.5 MediumfirefoxAlmaLinuxXSLT documents could bypass CSP8.1 HighfirefoxAlmaLinuxIncorrect URL stripping in CSP reports9.8 CriticalfirefoxAlmaLinuxPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxAlmaLinuxjavascript: URLs executed on object and embed tags8.1 HighfirefoxAlmaLinuxLarge branch table could lead to truncated instruction9.8 CriticalfirefoxAlmaLinuxJavaScript engine only wrote partial return value to stack6.5 MediumfirefoxAlmaLinuxContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumfirefoxAlmaLinuxIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumfirefoxAlmaLinuxThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumfirefoxAlmaLinuxUse-after-free in FontFaceSet9.8 CriticalfirefoxAlmaLinuxUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumfirefoxAlmaLinuxMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighfirefoxAlmaLinuxClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumfirefoxAlmaLinuxScript element events leaked cross-origin resource status4.3 MediumfirefoxAlmaLinuxPotential local code execution in “Copy as cURL” command4.8 MediumfirefoxAlmaLinuxError handling for script execution was incorrectly isolated from web content4.3 MediumfirefoxAlmaLinuxOut-of-bounds access when optimizing linear sums8.8 HighfirefoxAlmaLinuxOut-of-bounds access when resolving Promise objects9.8 CriticalfirefoxAlmaLinuxMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighfirefoxAlmaLinuxUnsafe attribute access during XPath parsing4.8 MediumfirefoxAlmaLinuxProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalfirefoxAlmaLinuxPrivilege escalation in Thunderbird Updater8.8 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighfirefoxAlmaLinuxURL Bar Spoofing via non-BMP Unicode characters7.3 HighfirefoxAlmaLinuxUse-after-free triggered by XSLTProcessor6.5 MediumfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighfirefoxAlmaLinuxAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighfirefoxAlmaLinuxClickjacking the registerProtocolHandler info-bar4.3 MediumfirefoxAlmaLinuxUnexpected GC during RegExp bailout processing6.5 MediumfirefoxAlmaLinuxJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighfirefoxAlmaLinuxInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighfirefoxAlmaLinuxUse-after-free in WebTransportChild7.5 HighfirefoxAlmaLinuxAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalfirefoxAlmaLinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalfirefoxAlmaLinuxCertificate length was not properly checked8.8 HighfirefoxAlmaLinuxPotential opening of private browsing tabs in normal browsing windows6.5 MediumfirefoxAlmaLinuxUse-after-free during concurrent delazification7.5 HighfirefoxAlmaLinuxA bug in WebAssembly code generation could result in a crash8.8 High- Show moreLoading…