librewolf vulnerabilities (Alpine)
353 vulnerabilities.
librewolfAlpineThe developer page about:memory has a Measure function for exploring what object types the...6.5 MediumlibrewolfAlpineWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...8.1 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighlibrewolfAlpineWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumlibrewolfAlpineAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumlibrewolfAlpineIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighlibrewolfAlpineWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 MediumlibrewolfAlpineIncorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a...8.8 HighlibrewolfAlpineFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighlibrewolfAlpinePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighlibrewolfAlpineThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 MediumlibrewolfAlpineAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 MediumlibrewolfAlpineThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 MediumlibrewolfAlpineUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighlibrewolfAlpineWhen a malicious application installed on the user's device broadcast an Intent to Firefox for...6.5 MediumlibrewolfAlpineBy attempting to connect a website using an unresponsive port, an attacker could have controlled...6.5 MediumlibrewolfAlpineUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighlibrewolfAlpineIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighlibrewolfAlpineWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumlibrewolfAlpineWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 MediumlibrewolfAlpineUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumlibrewolfAlpineWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumlibrewolfAlpineWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighlibrewolfAlpineCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighlibrewolfAlpineThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 CriticallibrewolfAlpineCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighlibrewolfAlpineIf the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version...6.8 MediumlibrewolfAlpineOneCRL was non-functional in the new Firefox for Android due to a missing service initialization....6.5 MediumlibrewolfAlpineWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 MediumlibrewolfAlpineWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...4.3 MediumlibrewolfAlpineUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumlibrewolfAlpineSearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighlibrewolfAlpineWhen listening for page changes with a Mutation Observer, a malicious web page could confuse...6.5 MediumlibrewolfAlpineSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumlibrewolfAlpineRepeated calls to the history and location interfaces could have been used to hang the browser....4.3 MediumlibrewolfAlpineCross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 MediumlibrewolfAlpineWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumlibrewolfAlpineIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighlibrewolfAlpineDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighlibrewolfAlpineFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumlibrewolfAlpineIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumlibrewolfAlpineIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumlibrewolfAlpineIncorrect bookkeeping of functions inlined during JIT compilation could have led to memory...8.8 HighlibrewolfAlpineSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Medium- Show moreLoading…