firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 Highfirefox-esrAlpineA missing check related to tex units could have led to a use-after-free and potentially...6.5 Mediumfirefox-esrAlpineMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 Highfirefox-esrAlpineThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 Mediumfirefox-esrAlpineA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 Highfirefox-esrAlpineAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 Highfirefox-esrAlpineMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 Highfirefox-esrAlpineUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 Mediumfirefox-esrAlpineIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 Mediumfirefox-esrAlpineKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 Mediumfirefox-esrAlpineWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 Highfirefox-esrAlpineCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 Mediumfirefox-esrAlpineWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 Mediumfirefox-esrAlpineThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 Highfirefox-esrAlpineThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 Mediumfirefox-esrAlpineIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 Criticalfirefox-esrAlpineFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 Mediumfirefox-esrAlpineThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 Mediumfirefox-esrAlpineService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 Mediumfirefox-esrAlpineMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esrAlpineIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 Mediumfirefox-esrAlpineCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 Highfirefox-esrAlpineA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 Highfirefox-esrAlpineInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 Mediumfirefox-esrAlpineAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 Mediumfirefox-esrAlpineMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 Highfirefox-esrAlpineConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 Mediumfirefox-esrAlpineDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 Mediumfirefox-esrAlpineBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 Mediumfirefox-esrAlpineWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 Mediumfirefox-esrAlpineWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 Mediumfirefox-esrAlpineMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 Highfirefox-esrAlpineMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esrAlpineA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 Highfirefox-esrAlpineA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 Highfirefox-esrAlpineAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 Mediumfirefox-esrAlpineMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 Highfirefox-esrAlpineWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 Highfirefox-esrAlpineWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Mediumfirefox-esrAlpineThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 Mediumfirefox-esrAlpineThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 Highfirefox-esrAlpineIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 Highfirefox-esrAlpineA malicious website that could create a popup could have resized the popup to overlay the address...6.5 Mediumfirefox-esrAlpineIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 Mediumfirefox-esrAlpineSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Criticalfirefox-esrAlpineAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 Highfirefox-esrAlpineIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 Highfirefox-esrAlpineWhen downloading files on Windows, the % character was not escaped, which could have lead to a...8.8 Highfirefox-esrAlpineMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 Criticalfirefox-esrAlpineAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 Medium- Show moreLoading…