firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianA use-after-free vulnerability during video control operations when a "<track>" element holds a...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....9.8 Criticalfirefox-esrDebianA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...9.8 Criticalfirefox-esrDebianFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....9.8 Criticalfirefox-esrDebianAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...9.1 Criticalfirefox-esrDebianDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...9.8 Criticalfirefox-esrDebianA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 Mediumfirefox-esrDebianMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability in frame selection triggered by a combination of malicious script...9.8 Criticalfirefox-esrDebianA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...9.8 Criticalfirefox-esrDebianAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 Highfirefox-esrDebianAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 Criticalfirefox-esrDebianAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 Criticalfirefox-esrDebianA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 Highfirefox-esrDebianA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 Highfirefox-esrDebianAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 Criticalfirefox-esrDebianA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 Criticalfirefox-esrDebianAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 Highfirefox-esrDebianA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 Criticalfirefox-esrDebianMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 Criticalfirefox-esrDebianVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 Mediumfirefox-esrDebianUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 Mediumfirefox-esrDebianCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 Mediumfirefox-esrDebianA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 Criticalfirefox-esrDebianA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 Criticalfirefox-esrDebianA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 Criticalfirefox-esrDebianJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 Criticalfirefox-esrDebianThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 Criticalfirefox-esrDebianWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 Highfirefox-esrDebianURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 Mediumfirefox-esrDebianA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 Criticalfirefox-esrDebianHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 Highfirefox-esrDebianUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 Criticalfirefox-esrDebianJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 Criticalfirefox-esrDebianA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 Highfirefox-esrDebianAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 Highfirefox-esrDebianThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 Highfirefox-esrDebianHTML tags received from the Pocket server will be processed without sanitization and any...9.8 Critical- Show moreLoading…