firefox vulnerabilities (Alpine)
353 vulnerabilities.
firefoxAlpineIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 CriticalfirefoxAlpineWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 MediumfirefoxAlpineWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 HighfirefoxAlpineIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 MediumfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalfirefoxAlpineHeap buffer overflow in CefSharp9.6 CriticalfirefoxAlpineUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighfirefoxAlpineWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 HighfirefoxAlpineWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighfirefoxAlpineBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumfirefoxAlpineFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumfirefoxAlpineWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighfirefoxAlpineIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 HighfirefoxAlpineA lock was missing when accessing a data structure and importing certificate information into the...4.3 MediumfirefoxAlpineWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 MediumfirefoxAlpineFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 MediumfirefoxAlpineBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumfirefoxAlpineWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 MediumfirefoxAlpineDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 MediumfirefoxAlpineWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 MediumfirefoxAlpineFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 HighfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighfirefoxAlpineThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumfirefoxAlpineJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighfirefoxAlpineA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumfirefoxAlpineWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumfirefoxAlpineAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumfirefoxAlpineBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumfirefoxAlpineInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumfirefoxAlpineWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighfirefoxAlpineDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumfirefoxAlpineWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumfirefoxAlpineIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighfirefoxAlpineWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumfirefoxAlpineWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighfirefoxAlpineWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighfirefoxAlpineManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumfirefoxAlpineDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighfirefoxAlpineA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighfirefoxAlpineWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumfirefoxAlpineUndefined Behavior in bounded Crossbeam channel8.1 HighfirefoxAlpineDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 HighfirefoxAlpineWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 HighfirefoxAlpineWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Medium- Show moreLoading…