firefox-esr vulnerabilities (Alpine)
450 vulnerabilities.
firefox-esrAlpineA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 Mediumfirefox-esrAlpineDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 Highfirefox-esrAlpineIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-esrAlpineNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Mediumfirefox-esrAlpineElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 Highfirefox-esrAlpineMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 Criticalfirefox-esrAlpineIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 Criticalfirefox-esrAlpineDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 Mediumfirefox-esrAlpineA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 Mediumfirefox-esrAlpineDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 Highfirefox-esrAlpineBuffer Overflow in WebGL glGetProgramiv8.8 Highfirefox-esrAlpineInteger Overflow in RecordedSourceSurfaceCreation8.6 Highfirefox-esrAlpineMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 Highfirefox-esrAlpineMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 Highfirefox-esrAlpineBrowsing Context potentially not cleared when closing Private Window7.5 Highfirefox-esrAlpineXLL file extensions were downloadable without warnings4.3 Mediumfirefox-esrAlpinePush notifications saved to disk unencrypted6.5 Mediumfirefox-esrAlpineError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Mediumfirefox-esrAlpineMemory corruption in JIT UpdateRegExpStatics6.5 Mediumfirefox-esrAlpineMemory corruption in IPC FilePickerShownCallback6.5 Mediumfirefox-esrAlpineMemory corruption in IPC ColorPickerShownCallback6.5 Mediumfirefox-esrAlpineMemory corruption in IPC CanvasTranslator6.5 Mediumfirefox-esrAlpineMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Criticalfirefox-esrAlpineMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 Criticalfirefox-esrAlpineWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 Highfirefox-esrAlpineWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 Mediumfirefox-esrAlpineThe Firefox updater created a directory writable by non-privileged users. When uninstalling...6.5 Mediumfirefox-esrAlpineFull screen notification obscured by external program6.5 Mediumfirefox-esrAlpineFull screen notification obscured by file open dialog7.5 Highfirefox-esrAlpineIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 Highfirefox-esrAlpineRace conditions in reference counting code were found through code inspection. These could have...5.9 Mediumfirefox-esrAlpineAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 Highfirefox-esrAlpineA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-esrAlpineIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Mediumfirefox-esrAlpineOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Mediumfirefox-esrAlpineUse-after-free in workers8.8 Highfirefox-esrAlpineMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 Highfirefox-esrAlpineA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 Mediumfirefox-esrAlpineA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 Highfirefox-esrAlpineUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 Mediumfirefox-esrAlpineThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 Mediumfirefox-esrAlpineA website could have obscured the fullscreen notification by using an option element by...6.5 Mediumfirefox-esrAlpineInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 Highfirefox-esrAlpineWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 Mediumfirefox-esrAlpineMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 Highfirefox-esrAlpineWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 Highfirefox-esrAlpineA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Mediumfirefox-esrAlpineCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-esrAlpineAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 Highfirefox-esrAlpineMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Critical- Show moreLoading…