firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Criticalfirefox-esrDebianAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Criticalfirefox-esrDebianWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 Highfirefox-esrDebianThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 Mediumfirefox-esrDebianA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 Criticalfirefox-esrDebianTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Mediumfirefox-esrDebianA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 Criticalfirefox-esrDebianThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 Mediumfirefox-esrDebianA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 Criticalfirefox-esrDebianFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 Highfirefox-esrDebianMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 Criticalfirefox-esrDebianDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 Highfirefox-esrDebianA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 Criticalfirefox-esrDebianA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 Highfirefox-esrDebianWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 Highfirefox-esrDebianA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 Criticalfirefox-esrDebianThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 Highfirefox-esrDebianA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 Criticalfirefox-esrDebianOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 Mediumfirefox-esrDebianSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 Highfirefox-esrDebianA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 Criticalfirefox-esrDebianA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when reading an image observer during frame...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 Criticalfirefox-esrDebianAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...9.1 Criticalfirefox-esrDebianA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...9.8 Criticalfirefox-esrDebianUse of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:...8.8 Highfirefox-esrDebianHeap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:...8.1 Highfirefox-esrDebianOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...9.1 Criticalfirefox-esrDebianHeap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src...8.8 Highfirefox-esrDebianHeap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.8.8 Highfirefox-esrDebianOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.8.1 Highfirefox-esrDebianCharacters from the "Canadian Syllabics" unicode block can be mixed with characters from other...5.3 Mediumfirefox-esrDebianAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...9.1 Criticalfirefox-esrDebianA use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while...9.8 Criticalfirefox-esrDebianA use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP...9.8 Criticalfirefox-esrDebianAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...7.5 Highfirefox-esrDebianA use-after-free vulnerability during specific user interactions with the input method editor ...8.8 Highfirefox-esrDebianA use-after-free vulnerability with content viewer listeners that results in a potentially...9.8 Critical- Show moreLoading…