firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowfirefox-esrAlpineProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 Highfirefox-esrAlpineMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highfirefox-esrAlpineWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highfirefox-esrAlpineAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumfirefox-esrAlpineA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumfirefox-esrAlpineA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highfirefox-esrAlpineAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumfirefox-esrAlpineIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumfirefox-esrAlpineUse after free in libwebp5.3 Mediumfirefox-esrAlpineMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highfirefox-esrAlpineA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumfirefox-esrAlpineSimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 Mediumfirefox-esrAlpineA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 Criticalfirefox-esrAlpineFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highfirefox-esrAlpineWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highfirefox-esrAlpineAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highfirefox-esrAlpineFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumfirefox-esrAlpineA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumfirefox-esrAlpineA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 Mediumfirefox-esrAlpineAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 Criticalfirefox-esrAlpineUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Mediumfirefox-esrAlpineMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highfirefox-esrAlpineDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumfirefox-esrAlpineWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 Mediumfirefox-esrAlpineWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highfirefox-esrAlpineWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumfirefox-esrAlpineSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumfirefox-esrAlpineMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 Mediumfirefox-esrAlpineAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 Highfirefox-esrAlpineMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 Highfirefox-esrAlpineMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esrAlpineWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumfirefox-esrAlpineModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 Highfirefox-esrAlpineAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 Highfirefox-esrAlpineCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-esrAlpineWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 Highfirefox-esrAlpineA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 Mediumfirefox-esrAlpinePermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 Highfirefox-esrAlpineThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 Mediumfirefox-esrAlpineAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 Highfirefox-esrAlpineMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 Highfirefox-esrAlpineCalls to console.log allowed bypassing Content Security Policy via format directive6.5 Mediumfirefox-esrAlpineContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 Mediumfirefox-esrAlpineURL being dragged from cross-origin iframe into same tab triggers navigation6.5 Mediumfirefox-esrAlpineMalicious command could be hidden in devtools output on Windows6.5 Mediumfirefox-esrAlpineArbitrary file read from GTK drag and drop on Linux6.5 Mediumfirefox-esrAlpineBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 Mediumfirefox-esrAlpineAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 Highfirefox-esrAlpineA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 Critical- Show moreLoading…