firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 Mediumfirefox-esrDebianWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 Mediumfirefox-esrDebianWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 Highfirefox-esrDebianCertain network request objects were freed too early when releasing a network request handle....8.8 Highfirefox-esrDebianMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Mediumfirefox-esrDebianApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 Highfirefox-esrDebianConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 Highfirefox-esrDebianIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 Criticalfirefox-esrDebianMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 Criticalfirefox-esrDebianIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 Mediumfirefox-esrDebianUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Mediumfirefox-esrDebianDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 Mediumfirefox-esrDebianUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Mediumfirefox-esrDebianWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 Mediumfirefox-esrDebianFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 Highfirefox-esrDebianBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Mediumfirefox-esrDebianAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 Highfirefox-esrDebianUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Mediumfirefox-esrDebianA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 Highfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 Highfirefox-esrDebianDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Mediumfirefox-esrDebianBy displaying a form validity message in the correct location at the same time as a permission...4.3 Mediumfirefox-esrDebianThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Mediumfirefox-esrDebianThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Mediumfirefox-esrDebianWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 Highfirefox-esrDebianThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Criticalfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-esrDebianDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 Highfirefox-esrDebianFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 Highfirefox-esrDebianA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 Highfirefox-esrDebianA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 Highfirefox-esrDebianInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 Highfirefox-esrDebianUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 Highfirefox-esrDebianA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 Highfirefox-esrDebianOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 Highfirefox-esrDebianMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 Highfirefox-esrDebianPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 Highfirefox-esrDebianThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Mediumfirefox-esrDebianWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 Highfirefox-esrDebianIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 Highfirefox-esrDebianThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Mediumfirefox-esrDebianWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 Highfirefox-esrDebianA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 Highfirefox-esrDebianAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 Criticalfirefox-esrDebianA transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an...5.3 Mediumfirefox-esrDebianMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 Highfirefox-esrDebianA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Medium- Show moreLoading…