librewolf vulnerabilities (Alpine)
353 vulnerabilities.
librewolfAlpineMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighlibrewolfAlpineMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumlibrewolfAlpineAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumlibrewolfAlpineSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumlibrewolfAlpineWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumlibrewolfAlpineWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumlibrewolfAlpineWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighlibrewolfAlpineCertain network request objects were freed too early when releasing a network request handle....8.8 HighlibrewolfAlpineMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumlibrewolfAlpineApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighlibrewolfAlpineConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighlibrewolfAlpineIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticallibrewolfAlpineWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...6.1 MediumlibrewolfAlpineIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumlibrewolfAlpineUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumlibrewolfAlpineDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumlibrewolfAlpineUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumlibrewolfAlpineWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumlibrewolfAlpineWebExtensions with the correct permissions were able to create and install ServiceWorkers for...6.5 MediumlibrewolfAlpineFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighlibrewolfAlpineBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumlibrewolfAlpineAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighlibrewolfAlpineUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumlibrewolfAlpineThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighlibrewolfAlpineMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumlibrewolfAlpineFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...8.1 HighlibrewolfAlpineDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumlibrewolfAlpineBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumlibrewolfAlpineThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumlibrewolfAlpineThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumlibrewolfAlpineWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighlibrewolfAlpineThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticallibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...8.8 HighlibrewolfAlpineDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighlibrewolfAlpineThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighlibrewolfAlpineDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighlibrewolfAlpineWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...8.8 HighlibrewolfAlpineMixed-content checks were unable to analyze opaque origins which led to some mixed content being...6.5 MediumlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighlibrewolfAlpineFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighlibrewolfAlpineFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 MediumlibrewolfAlpineMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighlibrewolfAlpineMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighlibrewolfAlpineFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighlibrewolfAlpineAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumlibrewolfAlpineA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighlibrewolfAlpineA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 High- Show moreLoading…