librewolf vulnerabilities (Alpine)
353 vulnerabilities.
-
librewolfAlpine Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory... 9.8 Critical -
librewolfAlpine Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of... 9.8 Critical -
librewolfAlpine A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt.... 4.3 Medium -
librewolfAlpine During garbage collection extra operations were performed on a object that should not be. This... 7.5 High -
librewolfAlpine The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ... 6.5 Medium -
librewolfAlpine A website could have obscured the full screen notification by using the file open dialog. This... 4.3 Medium -
librewolfAlpine A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance... 4.3 Medium -
librewolfAlpine Drivers are not always robust to extremely large draw calls and in some cases this scenario could... 7.5 High -
librewolfAlpine An attacker with temporary script access to a site could have set a cookie containing invalid... 5.3 Medium -
librewolfAlpine Using iterative requests an attacker was able to learn the size of an opaque response, as well as... 5.3 Medium -
librewolfAlpine It was possible for certain browser prompts and dialogs to be activated or dismissed... 4.3 Medium -
librewolfAlpine When visiting a website with an overly long URL, the user interface would start to hang. Due to... 6.5 Medium -
librewolfAlpine When closed or sent to the background, Firefox for Android would not properly record and persist... 6.1 Medium -
librewolfAlpine Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another... 4.3 Medium -
librewolfAlpine When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be... 8.8 High -
librewolfAlpine By generally accepting and passing resource handles across processes, a compromised content... 6.5 Medium -
librewolfAlpine When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do... 4.3 Medium -
librewolfAlpine If Firefox was installed to a world-writable directory, a local privilege escalation could occur... 7.0 High -
librewolfAlpine When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path... 5.5 Medium -
librewolfAlpine When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should... 8.1 High -
librewolfAlpine Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox... 8.8 High -
librewolfAlpine Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox... 9.8 Critical -
librewolfAlpine When combining CSS properties for overflow and transform, the mouse cursor could interact with... 7.5 High -
librewolfAlpine When visiting directory listings for `chrome://` URLs as source text, some parameters were... 5.3 Medium -
librewolfAlpine When using the Performance API, an attacker was able to notice subtle differences between... 6.1 Medium -
librewolfAlpine When loading a script with Subresource Integrity, attackers with an injection capability could... 4.3 Medium -
librewolfAlpine The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver... 6.5 Medium -
librewolfAlpine Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential... 9.8 Critical -
librewolfAlpine An attacker who could have convinced a user to drag and drop an image to a filesystem could have... 8.8 High -
librewolfAlpine An attacker who could have convinced a user to drag and drop an image to a filesystem could have... 8.8 High -
librewolfAlpine Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an... 8.8 High -
librewolfAlpine The MediaError message property should be consistent to avoid leaking information about cross... 7.5 High -
librewolfAlpine ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the... 9.8 Critical -
librewolfAlpine SVG <code><use></code> tags that referenced a same-origin document could have resulted in... 6.1 Medium -
librewolfAlpine Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if... 6.1 Medium -
librewolfAlpine The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>... 6.1 Medium -
librewolfAlpine When downloading an update for an addon, the downloaded addon update's version was not verified... 6.5 Medium -
librewolfAlpine The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of... 8.8 High -
librewolfAlpine In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have... 8.8 High -
librewolfAlpine A malicious website that could create a popup could have resized the popup to overlay the address... 6.5 Medium -
librewolfAlpine If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests... 4.3 Medium -
librewolfAlpine Session history navigations may have led to a use-after-free and potentially exploitable crash.... 9.8 Critical -
librewolfAlpine An iframe that was not permitted to run scripts could do so if the user clicked on a <code... 8.8 High -
librewolfAlpine If an object prototype was corrupted by an attacker, they would have been able to set undesired... 8.8 High -
librewolfAlpine When downloading files on Windows, the % character was not escaped, which could have lead to a... 8.8 High -
librewolfAlpine Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla... 9.8 Critical -
librewolfAlpine Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported... 9.8 Critical -
librewolfAlpine If array shift operations are not used, the Garbage Collector may have become confused about... 4.3 Medium -
librewolfAlpine An attacker could have injected CSS into stylesheets accessible via internal URIs, such as... 6.5 Medium -
librewolfAlpine Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity... 6.5 Medium - Show olderLoading…