firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
-
firefox-esrAlpine Video frames could have been leaked between origins in some situations. This vulnerability... 6.5 Medium -
firefox-esrAlpine An attacker could have caused a use-after-free when accessibility was enabled, leading to a... 7.5 High -
firefox-esrAlpine A permission leak could have occurred from a trusted site to an untrusted site via `embed` or ... 7.5 High -
firefox-esrAlpine An attacker was able to inject an event handler into a privileged object that would allow... 8.4 High -
firefox-esrAlpine To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to... 2.7 Low -
firefox-esrAlpine An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system... 5.9 Medium -
firefox-esrAlpine Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of... 8.8 High -
firefox-esrAlpine If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have... 8.1 High -
firefox-esrAlpine A missing delay on when pointer lock was used could have allowed a malicious page to trick a user... 5.5 Medium -
firefox-esrAlpine `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()... 8.4 High -
firefox-esrAlpine Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of... 8.1 High -
firefox-esrAlpine Incorrect code generation could have led to unexpected numeric conversions and potential... 7.5 High -
firefox-esrAlpine Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an... 6.1 Medium -
firefox-esrAlpine A malicious website could have used a combination of exiting fullscreen mode and ... 6.1 Medium -
firefox-esrAlpine If a website set a large custom cursor, portions of the cursor could have overlapped with the... 6.1 Medium -
firefox-esrAlpine A website could have obscured the fullscreen notification by using a dropdown select input... 4.3 Medium -
firefox-esrAlpine Through a series of API calls and redirects, an attacker-controlled alert dialog could have been... 6.5 Medium -
firefox-esrAlpine When storing and re-accessing data on a networking channel, the length of buffers may have been... 7.5 High -
firefox-esrAlpine An unchecked return value in TLS handshake code could have caused a potentially exploitable crash... 7.5 High -
firefox-esrAlpine Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of... 8.8 High -
firefox-esrAlpine In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This... 6.5 Medium -
firefox-esrAlpine A malicious devtools extension could have been used to escalate privileges. This vulnerability... 8.8 High -
firefox-esrAlpine A bug in popup notifications delay calculation could have made it possible for an attacker to... 8.8 High -
firefox-esrAlpine When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security... 6.5 Medium -
firefox-esrAlpine A Linux user opening the print preview dialog could have caused the browser to crash. This... 6.5 Medium -
firefox-esrAlpine It was possible for certain browser prompts and dialogs to be activated or dismissed... 4.3 Medium -
firefox-esrAlpine An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a... 6.5 Medium -
firefox-esrAlpine The timing of a button click causing a popup to disappear was approximately the same length as... 6.1 Medium -
firefox-esrAlpine `EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only... 6.5 Medium -
firefox-esrAlpine Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of... 8.8 High -
firefox-esrAlpine The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on... 8.8 High -
firefox-esrAlpine A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest... 8.8 High -
firefox-esrAlpine The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in... 8.8 High -
firefox-esrAlpine The `VideoBridge` allowed any content process to use textures produced by remote decoders. This... 6.5 Medium -
firefox-esrAlpine A use-after-free condition affected TLS socket creation when under memory pressure. This... 8.8 High -
firefox-esrAlpine Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM... 8.8 High -
firefox-esrAlpine When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be... 5.3 Medium -
firefox-esrAlpine The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on... 8.8 High -
firefox-esrAlpine Memory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these... 8.8 High -
firefox-esrAlpine Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"... 6.5 Medium -
firefox-esrAlpine When using X11, text selected by the page using the Selection API was erroneously copied into the... 8.8 High -
firefox-esrAlpine Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects... 8.8 High -
firefox-esrAlpine The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking... 5.4 Medium -
firefox-esrAlpine It was possible to cause the use of a MessagePort after it had already been freed, which could... 6.5 Medium -
firefox-esrAlpine On some systems—depending on the graphics settings and drivers—it was possible to force an out-of... 6.5 Medium -
firefox-esrAlpine Address bar spoofing via bidirectional characters 6.5 Medium -
firefox-esrAlpine Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of... 9.8 Critical -
firefox-esrAlpine During garbage collection extra operations were performed on a object that should not be. This... 7.5 High -
firefox-esrAlpine The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ... 6.5 Medium -
firefox-esrAlpine A website could have obscured the full screen notification by using the file open dialog. This... 4.3 Medium - Show olderLoading…