firefox vulnerabilities (Alpine)
353 vulnerabilities.
firefoxAlpineMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighfirefoxAlpineMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxAlpineAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxAlpineSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxAlpineWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxAlpineWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxAlpineWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxAlpineCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxAlpineMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxAlpineApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxAlpineConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxAlpineIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalfirefoxAlpineWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...6.1 MediumfirefoxAlpineIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumfirefoxAlpineUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumfirefoxAlpineDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumfirefoxAlpineUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumfirefoxAlpineWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumfirefoxAlpineWebExtensions with the correct permissions were able to create and install ServiceWorkers for...6.5 MediumfirefoxAlpineFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighfirefoxAlpineBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumfirefoxAlpineAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighfirefoxAlpineUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumfirefoxAlpineThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighfirefoxAlpineMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumfirefoxAlpineFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...8.1 HighfirefoxAlpineDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumfirefoxAlpineBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumfirefoxAlpineThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumfirefoxAlpineThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumfirefoxAlpineWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighfirefoxAlpineThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...8.8 HighfirefoxAlpineDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighfirefoxAlpineThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighfirefoxAlpineDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighfirefoxAlpineWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...8.8 HighfirefoxAlpineMixed-content checks were unable to analyze opaque origins which led to some mixed content being...6.5 MediumfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighfirefoxAlpineFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighfirefoxAlpineFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 MediumfirefoxAlpineMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighfirefoxAlpineMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighfirefoxAlpineFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighfirefoxAlpineAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumfirefoxAlpineA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighfirefoxAlpineA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 High- Show moreLoading…