firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 Mediumfirefox-esrAlpineUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Mediumfirefox-esrAlpineDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 Mediumfirefox-esrAlpineUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Mediumfirefox-esrAlpineWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 Mediumfirefox-esrAlpineFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 Highfirefox-esrAlpineBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Mediumfirefox-esrAlpineAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 Highfirefox-esrAlpineUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Mediumfirefox-esrAlpineThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 Highfirefox-esrAlpineMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 Mediumfirefox-esrAlpineDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Mediumfirefox-esrAlpineBy displaying a form validity message in the correct location at the same time as a permission...4.3 Mediumfirefox-esrAlpineThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Mediumfirefox-esrAlpineThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Mediumfirefox-esrAlpineWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 Highfirefox-esrAlpineThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Criticalfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-esrAlpineDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 Highfirefox-esrAlpineThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 Mediumfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-esrAlpineDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 Highfirefox-esrAlpineWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 Mediumfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 Highfirefox-esrAlpineFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 Highfirefox-esrAlpineA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 Highfirefox-esrAlpineA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 Highfirefox-esrAlpineInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 Highfirefox-esrAlpineUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 Highfirefox-esrAlpineData race in crossbeam-deque9.8 Criticalfirefox-esrAlpineMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 Highfirefox-esrAlpineA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 Highfirefox-esrAlpineOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 Highfirefox-esrAlpinePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 Highfirefox-esrAlpineThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Mediumfirefox-esrAlpineWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 Highfirefox-esrAlpineIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 Highfirefox-esrAlpineThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Mediumfirefox-esrAlpineWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 Highfirefox-esrAlpineA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 Highfirefox-esrAlpineMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 Highfirefox-esrAlpineA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Mediumfirefox-esrAlpineUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Mediumfirefox-esrAlpineA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 Highfirefox-esrAlpineMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 Highfirefox-esrAlpineWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Mediumfirefox-esrAlpineAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Medium- Show moreLoading…