firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianXLL file extensions were downloadable without warnings4.3 Mediumfirefox-esrDebianPush notifications saved to disk unencrypted6.5 Mediumfirefox-esrDebianError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Mediumfirefox-esrDebianMemory corruption in JIT UpdateRegExpStatics6.5 Mediumfirefox-esrDebianMemory corruption in IPC FilePickerShownCallback6.5 Mediumfirefox-esrDebianMemory corruption in IPC ColorPickerShownCallback6.5 Mediumfirefox-esrDebianMemory corruption in IPC CanvasTranslator6.5 Mediumfirefox-esrDebianMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Criticalfirefox-esrDebianMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 Criticalfirefox-esrDebianWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 Highfirefox-esrDebianFull screen notification obscured by external program6.5 Mediumfirefox-esrDebianFull screen notification obscured by file open dialog7.5 Highfirefox-esrDebianIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 Highfirefox-esrDebianRace conditions in reference counting code were found through code inspection. These could have...5.9 Mediumfirefox-esrDebianAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 Highfirefox-esrDebianA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-esrDebianIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Mediumfirefox-esrDebianOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Mediumfirefox-esrDebianMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 Highfirefox-esrDebianWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 Highfirefox-esrDebianA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Mediumfirefox-esrDebianCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-esrDebianAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 Highfirefox-esrDebianMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Criticalfirefox-esrDebianThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowfirefox-esrDebianMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highfirefox-esrDebianWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highfirefox-esrDebianAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumfirefox-esrDebianA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumfirefox-esrDebianA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highfirefox-esrDebianAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumfirefox-esrDebianIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumfirefox-esrDebianUse after free in libwebp5.3 Mediumfirefox-esrDebianMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highfirefox-esrDebianA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumfirefox-esrDebianFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highfirefox-esrDebianWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highfirefox-esrDebianAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highfirefox-esrDebianFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumfirefox-esrDebianA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumfirefox-esrDebianUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Mediumfirefox-esrDebianMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highfirefox-esrDebianDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumfirefox-esrDebianWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highfirefox-esrDebianWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumfirefox-esrDebianSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumfirefox-esrDebianMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 Highfirefox-esrDebianMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esrDebianWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumfirefox-esrDebianModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 High- Show moreLoading…