firefox vulnerabilities (Alpine)
353 vulnerabilities.
firefoxAlpineMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 MediumfirefoxAlpineMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighfirefoxAlpineWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumfirefoxAlpineNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumfirefoxAlpineUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighfirefoxAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighfirefoxAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalfirefoxAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 CriticalfirefoxAlpineA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 LowfirefoxAlpineDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 HighfirefoxAlpineIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 CriticalfirefoxAlpineA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalfirefoxAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumfirefoxAlpineA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighfirefoxAlpineMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 CriticalfirefoxAlpineMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalfirefoxAlpineInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 LowfirefoxAlpineA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 CriticalfirefoxAlpineOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighfirefoxAlpineWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighfirefoxAlpineUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighfirefoxAlpineUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighfirefoxAlpineMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...9.8 CriticalfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalfirefoxAlpineWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 MediumfirefoxAlpineThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumfirefoxAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighfirefoxAlpineAfter a website had entered fullscreen mode, it could have used a previously opened popup to...4.3 MediumfirefoxAlpineWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...6.5 MediumfirefoxAlpineWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighfirefoxAlpineBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighfirefoxAlpineWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighfirefoxAlpineWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...7.5 HighfirefoxAlpineusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumfirefoxAlpineIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighfirefoxAlpineAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...6.5 MediumfirefoxAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumfirefoxAlpineIf an XML file is served with a Content Security Policy and the XML file includes an XSL...6.5 MediumfirefoxAlpineDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighfirefoxAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumfirefoxAlpineIf upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged...4.3 MediumfirefoxAlpineA Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to...6.1 MediumfirefoxAlpineAn object tag with a data URI did not correctly inherit the document's Content Security Policy....6.1 MediumfirefoxAlpineA compromised content process could send a message to the parent process that would cause the ...6.5 MediumfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighfirefoxAlpineWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 High- Show moreLoading…