firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumfirefox-esrDebianNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 Mediumfirefox-esrDebianUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highfirefox-esrDebianA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalfirefox-esrDebianThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumfirefox-esrDebianA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highfirefox-esrDebianMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalfirefox-esrDebianOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highfirefox-esrDebianWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highfirefox-esrDebianUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highfirefox-esrDebianUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalfirefox-esrDebianThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumfirefox-esrDebianThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highfirefox-esrDebianWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highfirefox-esrDebianBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highfirefox-esrDebianWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highfirefox-esrDebianusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highfirefox-esrDebianIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumfirefox-esrDebianA content process could have modified shared memory relating to crash reporting information,...8.8 Highfirefox-esrDebianIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highfirefox-esrDebianWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esrDebianDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 Highfirefox-esrDebianWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highfirefox-esrDebianUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highfirefox-esrDebianUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highfirefox-esrDebianWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highfirefox-esrDebianThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highfirefox-esrDebianFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediumfirefox-esrDebianIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediumfirefox-esrDebianBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediumfirefox-esrDebianA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highfirefox-esrDebianAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highfirefox-esrDebianWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highfirefox-esrDebianGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalfirefox-esrDebianIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highfirefox-esrDebianIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highfirefox-esrDebianA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Mediumfirefox-esrDebianA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Mediumfirefox-esrDebianWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Mediumfirefox-esrDebianThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 Mediumfirefox-esrDebianA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highfirefox-esrDebianSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediumfirefox-esrDebianNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowfirefox-esrDebianA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Medium- Show moreLoading…