firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 Highfirefox-esrDebianIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 Highfirefox-esrDebianA WebExtension can request access to local files without the warning prompt stating that the...7.1 Highfirefox-esrDebianA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 Mediumfirefox-esrDebianBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 Highfirefox-esrDebianA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 Highfirefox-esrDebianWhen manipulating user events in nested loops while opening a document through script, it is...9.8 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 Highfirefox-esrDebianA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 Criticalfirefox-esrDebianA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 Highfirefox-esrDebianWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 Highfirefox-esrDebianA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 Highfirefox-esrDebianA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...6.5 Mediumfirefox-esrDebianIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 Mediumfirefox-esrDebianA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 Criticalfirefox-esrDebianMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 Criticalfirefox-esrDebianMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 Criticalfirefox-esrDebianA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 Criticalfirefox-esrDebianAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 Mediumfirefox-esrDebianA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 Mediumfirefox-esrDebianNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 Highfirefox-esrDebianA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 Highfirefox-esrDebianAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 Highfirefox-esrDebianA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 Highfirefox-esrDebianA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 Highfirefox-esrDebianA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 Highfirefox-esrDebianMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 Criticalfirefox-esrDebianA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 Highfirefox-esrDebianSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 Mediumfirefox-esrDebianAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Criticalfirefox-esrDebianMalicious PDF can inject JavaScript into PDF Viewer8.8 Highfirefox-esrDebianSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 Highfirefox-esrDebianA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 Criticalfirefox-esrDebianMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 Criticalfirefox-esrDebianThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 Criticalfirefox-esrDebianAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 Highfirefox-esrDebianMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 Criticalfirefox-esrDebianAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 Highfirefox-esrDebianUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 Mediumfirefox-esrDebianWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 Highfirefox-esrDebianA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 Highfirefox-esrDebianA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 Highfirefox-esrDebianMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 Highfirefox-esrDebianA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 Criticalfirefox-esrDebianIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Mediumfirefox-esrDebianA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Critical- Show moreLoading…