firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowfirefox-esrAlpineA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediumfirefox-esrAlpineWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 Criticalfirefox-esrAlpineAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highfirefox-esrAlpineA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumfirefox-esrAlpineEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highfirefox-esrAlpineWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highfirefox-esrAlpineA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumfirefox-esrAlpinePOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highfirefox-esrAlpineA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highfirefox-esrAlpineA race condition is present in the crash generation server used to generate data for the crash...8.3 Highfirefox-esrAlpineIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 Highfirefox-esrAlpineA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 Highfirefox-esrAlpineA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Criticalfirefox-esrAlpineA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Criticalfirefox-esrAlpineImages from a different domain can be read using a canvas object in some circumstances. This...5.3 Mediumfirefox-esrAlpineA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 Mediumfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 Criticalfirefox-esrAlpineIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 Mediumfirefox-esrAlpineThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 Criticalfirefox-esrAlpineFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 Mediumfirefox-esrAlpineA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 Criticalfirefox-esrAlpineIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 Highfirefox-esrAlpineIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 Highfirefox-esrAlpineCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 Mediumfirefox-esrAlpineA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Criticalfirefox-esrAlpineA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Criticalfirefox-esrAlpineA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Mediumfirefox-esrAlpineThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 Criticalfirefox-esrAlpineThe type inference system allows the compilation of functions that can cause type confusions...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Criticalfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Criticalfirefox-esrAlpineLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Mediumfirefox-esrAlpineIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 Mediumfirefox-esrAlpinepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 Mediumfirefox-esrAlpineWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 Mediumfirefox-esrAlpineA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Criticalfirefox-esrAlpineAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 Highfirefox-esrAlpineA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 Highfirefox-esrAlpineA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 Criticalfirefox-esrAlpineIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Mediumfirefox-esrAlpineA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Criticalfirefox-esrAlpineA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Criticalfirefox-esrAlpineAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Criticalfirefox-esrAlpineMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Critical