firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 Highfirefox-esrDebianSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Mediumfirefox-esrDebianA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Mediumfirefox-esrDebianIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Mediumfirefox-esrDebianA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Mediumfirefox-esrDebianThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Mediumfirefox-esrDebianWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 Highfirefox-esrDebianAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 Highfirefox-esrDebianMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 Highfirefox-esrDebianIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Mediumfirefox-esrDebianA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 Highfirefox-esrDebianA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-esrDebianA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Mediumfirefox-esrDebianWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 Mediumfirefox-esrDebianA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 Mediumfirefox-esrDebianIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-esrDebianAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 Mediumfirefox-esrDebianThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 Mediumfirefox-esrDebian`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 Mediumfirefox-esrDebianMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 Highfirefox-esrDebianThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 Highfirefox-esrDebianA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 Highfirefox-esrDebianThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 Highfirefox-esrDebianThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 Mediumfirefox-esrDebianA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 Highfirefox-esrDebianFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 Highfirefox-esrDebianWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Mediumfirefox-esrDebianThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 Highfirefox-esrDebianMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 Highfirefox-esrDebianRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 Mediumfirefox-esrDebianWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 Highfirefox-esrDebianOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 Highfirefox-esrDebianThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 Mediumfirefox-esrDebianIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 Mediumfirefox-esrDebianOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 Mediumfirefox-esrDebianAddress bar spoofing via bidirectional characters6.5 Mediumfirefox-esrDebianMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Criticalfirefox-esrDebianDuring garbage collection extra operations were performed on a object that should not be. This...7.5 Highfirefox-esrDebianA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 Mediumfirefox-esrDebianDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 Highfirefox-esrDebianIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-esrDebianNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Mediumfirefox-esrDebianElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 Highfirefox-esrDebianMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 Criticalfirefox-esrDebianDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 Mediumfirefox-esrDebianA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 Mediumfirefox-esrDebianDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 Highfirefox-esrDebianMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 Highfirefox-esrDebianMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 Highfirefox-esrDebianBrowsing Context potentially not cleared when closing Private Window7.5 High- Show moreLoading…