firefox vulnerabilities (Alpine)
353 vulnerabilities.
-
firefoxAlpine Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory... 9.8 Critical -
firefoxAlpine Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of... 9.8 Critical -
firefoxAlpine A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt.... 4.3 Medium -
firefoxAlpine During garbage collection extra operations were performed on a object that should not be. This... 7.5 High -
firefoxAlpine The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ... 6.5 Medium -
firefoxAlpine A website could have obscured the full screen notification by using the file open dialog. This... 4.3 Medium -
firefoxAlpine A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance... 4.3 Medium -
firefoxAlpine Drivers are not always robust to extremely large draw calls and in some cases this scenario could... 7.5 High -
firefoxAlpine An attacker with temporary script access to a site could have set a cookie containing invalid... 5.3 Medium -
firefoxAlpine Using iterative requests an attacker was able to learn the size of an opaque response, as well as... 5.3 Medium -
firefoxAlpine It was possible for certain browser prompts and dialogs to be activated or dismissed... 4.3 Medium -
firefoxAlpine When visiting a website with an overly long URL, the user interface would start to hang. Due to... 6.5 Medium -
firefoxAlpine When closed or sent to the background, Firefox for Android would not properly record and persist... 6.1 Medium -
firefoxAlpine Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another... 4.3 Medium -
firefoxAlpine When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be... 8.8 High -
firefoxAlpine By generally accepting and passing resource handles across processes, a compromised content... 6.5 Medium -
firefoxAlpine When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do... 4.3 Medium -
firefoxAlpine If Firefox was installed to a world-writable directory, a local privilege escalation could occur... 7.0 High -
firefoxAlpine When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path... 5.5 Medium -
firefoxAlpine When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should... 8.1 High -
firefoxAlpine Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox... 8.8 High -
firefoxAlpine Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox... 9.8 Critical -
firefoxAlpine When combining CSS properties for overflow and transform, the mouse cursor could interact with... 7.5 High -
firefoxAlpine When visiting directory listings for `chrome://` URLs as source text, some parameters were... 5.3 Medium -
firefoxAlpine When using the Performance API, an attacker was able to notice subtle differences between... 6.1 Medium -
firefoxAlpine When loading a script with Subresource Integrity, attackers with an injection capability could... 4.3 Medium -
firefoxAlpine The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver... 6.5 Medium -
firefoxAlpine Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential... 9.8 Critical -
firefoxAlpine An attacker who could have convinced a user to drag and drop an image to a filesystem could have... 8.8 High -
firefoxAlpine An attacker who could have convinced a user to drag and drop an image to a filesystem could have... 8.8 High -
firefoxAlpine Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an... 8.8 High -
firefoxAlpine The MediaError message property should be consistent to avoid leaking information about cross... 7.5 High -
firefoxAlpine ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the... 9.8 Critical -
firefoxAlpine SVG <code><use></code> tags that referenced a same-origin document could have resulted in... 6.1 Medium -
firefoxAlpine Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if... 6.1 Medium -
firefoxAlpine The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>... 6.1 Medium -
firefoxAlpine When downloading an update for an addon, the downloaded addon update's version was not verified... 6.5 Medium -
firefoxAlpine The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of... 8.8 High -
firefoxAlpine In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have... 8.8 High -
firefoxAlpine A malicious website that could create a popup could have resized the popup to overlay the address... 6.5 Medium -
firefoxAlpine If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests... 4.3 Medium -
firefoxAlpine Session history navigations may have led to a use-after-free and potentially exploitable crash.... 9.8 Critical -
firefoxAlpine An iframe that was not permitted to run scripts could do so if the user clicked on a <code... 8.8 High -
firefoxAlpine If an object prototype was corrupted by an attacker, they would have been able to set undesired... 8.8 High -
firefoxAlpine When downloading files on Windows, the % character was not escaped, which could have lead to a... 8.8 High -
firefoxAlpine Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla... 9.8 Critical -
firefoxAlpine Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported... 9.8 Critical -
firefoxAlpine If array shift operations are not used, the Garbage Collector may have become confused about... 4.3 Medium -
firefoxAlpine An attacker could have injected CSS into stylesheets accessible via internal URIs, such as... 6.5 Medium -
firefoxAlpine Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity... 6.5 Medium - Show olderLoading…