firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Mediumfirefox-esrDebianA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 Highfirefox-esrDebianWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Mediumfirefox-esrDebianAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Mediumfirefox-esrDebianIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Mediumfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 Highfirefox-esrDebianFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 Highfirefox-esrDebianPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 Highfirefox-esrDebianUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highfirefox-esrDebianIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediumfirefox-esrDebianUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 Highfirefox-esrDebianWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediumfirefox-esrDebianUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediumfirefox-esrDebianWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediumfirefox-esrDebianWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highfirefox-esrDebianCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highfirefox-esrDebianCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highfirefox-esrDebianUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Mediumfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highfirefox-esrDebianSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediumfirefox-esrDebianWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediumfirefox-esrDebianIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highfirefox-esrDebianDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highfirefox-esrDebianFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediumfirefox-esrDebianIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediumfirefox-esrDebianIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediumfirefox-esrDebianA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediumfirefox-esrDebianSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediumfirefox-esrDebianIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Criticalfirefox-esrDebianUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highfirefox-esrDebianfirefox-esr - regression updateNo scorefirefox-esrDebianWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highfirefox-esrDebianBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Mediumfirefox-esrDebianFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highfirefox-esrDebianWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 Highfirefox-esrDebianBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highfirefox-esrDebianBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumfirefox-esrDebianInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumfirefox-esrDebianWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumfirefox-esrDebianWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highfirefox-esrDebianWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highfirefox-esrDebianManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumfirefox-esrDebianDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highfirefox-esrDebianMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 High- Show moreLoading…