firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highfirefox-esrDebianIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Mediumfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 Highfirefox-esrDebianAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highfirefox-esrDebianA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumfirefox-esrDebianEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highfirefox-esrDebianWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highfirefox-esrDebianA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumfirefox-esrDebianDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediumfirefox-esrDebianA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalfirefox-esrDebianPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highfirefox-esrDebianWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalfirefox-esrDebianTor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers...5.3 Mediumfirefox-esrDebianInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 Criticalfirefox-esrDebianA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highfirefox-esrDebianTor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to...4.3 Mediumfirefox-esrDebianA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Criticalfirefox-esrDebianA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Criticalfirefox-esrDebianImages from a different domain can be read using a canvas object in some circumstances. This...5.3 Mediumfirefox-esrDebianA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 Mediumfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 Criticalfirefox-esrDebianIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 Mediumfirefox-esrDebianThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 Criticalfirefox-esrDebianfirefox-esr - new upstream versionNo scorefirefox-esrDebianIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 Highfirefox-esrDebianIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 Highfirefox-esrDebianCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 Mediumfirefox-esrDebianA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Criticalfirefox-esrDebianA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Criticalfirefox-esrDebianA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Mediumfirefox-esrDebianThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 Criticalfirefox-esrDebianThe type inference system allows the compilation of functions that can cause type confusions...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Criticalfirefox-esrDebianLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Mediumfirefox-esrDebianIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 Mediumfirefox-esrDebianpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 Mediumfirefox-esrDebianWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 Mediumfirefox-esrDebianAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Criticalfirefox-esrDebianCross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 Mediumfirefox-esrDebianA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 Criticalfirefox-esrDebianA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 Mediumfirefox-esrDebianA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 Criticalfirefox-esrDebianA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 Critical- Show moreLoading…