firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Mediumfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 Highfirefox-esrAlpineFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 Highfirefox-esrAlpinePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 Highfirefox-esrAlpineUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highfirefox-esrAlpineIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediumfirefox-esrAlpineUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highfirefox-esrAlpineIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 Highfirefox-esrAlpineWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediumfirefox-esrAlpineUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediumfirefox-esrAlpineWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediumfirefox-esrAlpineWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highfirefox-esrAlpineCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highfirefox-esrAlpineCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highfirefox-esrAlpineUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Mediumfirefox-esrAlpineSearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 Mediumfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highfirefox-esrAlpineSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediumfirefox-esrAlpineWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediumfirefox-esrAlpineIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highfirefox-esrAlpineDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highfirefox-esrAlpineFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediumfirefox-esrAlpineIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediumfirefox-esrAlpineIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediumfirefox-esrAlpineA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediumfirefox-esrAlpineSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediumfirefox-esrAlpineIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Criticalfirefox-esrAlpineHeap buffer overflow in CefSharp9.6 Criticalfirefox-esrAlpineUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highfirefox-esrAlpineWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highfirefox-esrAlpineBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Mediumfirefox-esrAlpineFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highfirefox-esrAlpineIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 Highfirefox-esrAlpineBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumfirefox-esrAlpineGiven an installed malicious file picker application, an attacker was able to overwrite local...5.5 Mediumfirefox-esrAlpineGiven an installed malicious file picker application, an attacker was able to steal and upload...5.5 Mediumfirefox-esrAlpineFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 Highfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highfirefox-esrAlpineThe code for downloading files did not properly take care of special characters, which led to an...6.5 Mediumfirefox-esrAlpineJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 Highfirefox-esrAlpineA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 Mediumfirefox-esrAlpineWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Mediumfirefox-esrAlpineAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Mediumfirefox-esrAlpineBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumfirefox-esrAlpineInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumfirefox-esrAlpineWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Medium- Show moreLoading…