firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 Highfirefox-esrDebianUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 Criticalfirefox-esrDebianUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 Criticalfirefox-esrDebianMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 Highfirefox-esrDebianEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Mediumfirefox-esrDebianMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 Highfirefox-esrDebianAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 Mediumfirefox-esrDebianA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 Highfirefox-esrDebianAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Mediumfirefox-esrDebianAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Criticalfirefox-esrDebianA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 Highfirefox-esrDebianA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Mediumfirefox-esrDebianMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Criticalfirefox-esrDebianfirefox-esr - regression updateNo scorefirefox-esrDebianMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 Highfirefox-esrDebianUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 Criticalfirefox-esrDebianUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 Criticalfirefox-esrDebianHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 Highfirefox-esrDebianUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Criticalfirefox-esrDebianUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 Criticalfirefox-esrDebianUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 Criticalfirefox-esrDebianThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 Highfirefox-esrDebianHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 Criticalfirefox-esrDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 Criticalfirefox-esrDebianMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 Mediumfirefox-esrDebianUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 Highfirefox-esrDebianThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 Highfirefox-esrDebianMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Mediumfirefox-esrDebianInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 Highfirefox-esrDebianUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 Highfirefox-esrDebianUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 Highfirefox-esrDebianUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 Criticalfirefox-esrDebianStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 Highfirefox-esrDebianMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 Mediumfirefox-esrDebianHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 Highfirefox-esrDebianHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 Mediumfirefox-esrDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 Highfirefox-esrDebianMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 Mediumfirefox-esrDebianMultiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12...8.6 Highfirefox-esrDebianMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 Highfirefox-esrDebianUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 Highfirefox-esrDebianMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 Mediumfirefox-esrDebianUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 Highfirefox-esrDebianHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 Highfirefox-esrDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 Highfirefox-esrDebianHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 Highfirefox-esrDebianThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 Highfirefox-esrDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 Highfirefox-esrDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...8.8 High- Show moreLoading…