firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highfirefox-esrAlpineWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highfirefox-esrAlpineManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumfirefox-esrAlpineDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highfirefox-esrAlpineMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highfirefox-esrAlpineWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumfirefox-esrAlpineNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 Mediumfirefox-esrAlpineUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highfirefox-esrAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 Highfirefox-esrAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalfirefox-esrAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalfirefox-esrAlpineA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalfirefox-esrAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumfirefox-esrAlpineA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highfirefox-esrAlpineMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalfirefox-esrAlpineOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highfirefox-esrAlpineWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highfirefox-esrAlpineUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highfirefox-esrAlpineUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalfirefox-esrAlpineThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumfirefox-esrAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highfirefox-esrAlpineWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highfirefox-esrAlpineBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highfirefox-esrAlpineWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highfirefox-esrAlpineusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumfirefox-esrAlpineCommand line arguments could have been injected during Firefox invocation as a shell handler for...8.8 Highfirefox-esrAlpineBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 Mediumfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highfirefox-esrAlpineIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumfirefox-esrAlpineA content process could have modified shared memory relating to crash reporting information,...8.8 Highfirefox-esrAlpineIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highfirefox-esrAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esrAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esrAlpineWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highfirefox-esrAlpineUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highfirefox-esrAlpineUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highfirefox-esrAlpineWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highfirefox-esrAlpineThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highfirefox-esrAlpineMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highfirefox-esrAlpineWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highfirefox-esrAlpineGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalfirefox-esrAlpineIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highfirefox-esrAlpineIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highfirefox-esrAlpineSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Medium- Show moreLoading…