librewolf vulnerabilities (Alpine)
353 vulnerabilities.
librewolfAlpineMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 MediumlibrewolfAlpineMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighlibrewolfAlpineWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumlibrewolfAlpineNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumlibrewolfAlpineUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighlibrewolfAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighlibrewolfAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticallibrewolfAlpineThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticallibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 CriticallibrewolfAlpineA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 LowlibrewolfAlpineDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 HighlibrewolfAlpineIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 CriticallibrewolfAlpineA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticallibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticallibrewolfAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumlibrewolfAlpineA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighlibrewolfAlpineMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 CriticallibrewolfAlpineMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticallibrewolfAlpineInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 LowlibrewolfAlpineA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 CriticallibrewolfAlpineOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighlibrewolfAlpineWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighlibrewolfAlpineUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighlibrewolfAlpineUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighlibrewolfAlpineMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...9.8 CriticallibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticallibrewolfAlpineWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 MediumlibrewolfAlpineThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumlibrewolfAlpineThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighlibrewolfAlpineAfter a website had entered fullscreen mode, it could have used a previously opened popup to...4.3 MediumlibrewolfAlpineWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...6.5 MediumlibrewolfAlpineWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighlibrewolfAlpineBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighlibrewolfAlpineWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighlibrewolfAlpineWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...7.5 HighlibrewolfAlpineusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumlibrewolfAlpineIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighlibrewolfAlpineAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...6.5 MediumlibrewolfAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumlibrewolfAlpineIf an XML file is served with a Content Security Policy and the XML file includes an XSL...6.5 MediumlibrewolfAlpineDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighlibrewolfAlpineWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumlibrewolfAlpineIf upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged...4.3 MediumlibrewolfAlpineA Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to...6.1 MediumlibrewolfAlpineAn object tag with a data URI did not correctly inherit the document's Content Security Policy....6.1 MediumlibrewolfAlpineA compromised content process could send a message to the parent process that would cause the ...6.5 MediumlibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighlibrewolfAlpineWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 High- Show moreLoading…