librewolf vulnerabilities (Alpine)
353 vulnerabilities.
librewolfAlpineIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 CriticallibrewolfAlpineWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 MediumlibrewolfAlpineWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 HighlibrewolfAlpineIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 MediumlibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticallibrewolfAlpineHeap buffer overflow in CefSharp9.6 CriticallibrewolfAlpineUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighlibrewolfAlpineWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 HighlibrewolfAlpineWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighlibrewolfAlpineBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumlibrewolfAlpineFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumlibrewolfAlpineWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighlibrewolfAlpineIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 HighlibrewolfAlpineA lock was missing when accessing a data structure and importing certificate information into the...4.3 MediumlibrewolfAlpineWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 MediumlibrewolfAlpineFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 MediumlibrewolfAlpineBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumlibrewolfAlpineWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 MediumlibrewolfAlpineDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 MediumlibrewolfAlpineWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 MediumlibrewolfAlpineFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 HighlibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighlibrewolfAlpineThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumlibrewolfAlpineJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighlibrewolfAlpineA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumlibrewolfAlpineWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumlibrewolfAlpineAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumlibrewolfAlpineBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumlibrewolfAlpineInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumlibrewolfAlpineWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighlibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighlibrewolfAlpineDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumlibrewolfAlpineWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumlibrewolfAlpineIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighlibrewolfAlpineWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumlibrewolfAlpineWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighlibrewolfAlpineWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighlibrewolfAlpineManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumlibrewolfAlpineDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighlibrewolfAlpineA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighlibrewolfAlpineWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumlibrewolfAlpineUndefined Behavior in bounded Crossbeam channel8.1 HighlibrewolfAlpineDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 HighlibrewolfAlpineWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 HighlibrewolfAlpineWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Medium- Show moreLoading…