firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-esrDebianA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalfirefox-esrDebianThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalfirefox-esrDebianFirefox normally asks for confirmation before asking the operating system to find an application...7.5 Highfirefox-esrDebianInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highfirefox-esrDebianA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalfirefox-esrDebianCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 Mediumfirefox-esrDebianThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Mediumfirefox-esrDebianUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 Highfirefox-esrDebianANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Mediumfirefox-esrDebianIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 Highfirefox-esrDebianFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 Mediumfirefox-esrDebianEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 Highfirefox-esrDebianIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 Highfirefox-esrDebianInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Criticalfirefox-esrDebianType Confusion in Async Generators in Javascript Engine7.5 Highfirefox-esrDebianMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 Highfirefox-esrDebianMemory corruption in thread creation7.4 Highfirefox-esrDebianMemory corruption in NSS9.8 Criticalfirefox-esrDebianRace condition in permission assignment4.7 Mediumfirefox-esrDebianMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 Highfirefox-esrDebianMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 Highfirefox-esrDebianBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 Highfirefox-esrDebianOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Mediumfirefox-esrDebianBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Mediumfirefox-esrDebianBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Mediumfirefox-esrDebianIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 Highfirefox-esrDebianMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 Highfirefox-esrDebianWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 Highfirefox-esrDebianWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 Mediumfirefox-esrDebianA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Mediumfirefox-esrDebianIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 Mediumfirefox-esrDebianPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 Highfirefox-esrDebianMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 Highfirefox-esrDebianThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 Lowfirefox-esrDebianIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Mediumfirefox-esrDebianOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Mediumfirefox-esrDebianThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 Highfirefox-esrDebianIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 Highfirefox-esrDebianGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 Highfirefox-esrDebianAn attacker was able to inject an event handler into a privileged object that would allow...8.4 Highfirefox-esrDebianTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 Lowfirefox-esrDebianMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 Highfirefox-esrDebianIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 Highfirefox-esrDebianA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Mediumfirefox-esrDebianUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Mediumfirefox-esrDebianThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Mediumfirefox-esrDebian`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 Highfirefox-esrDebianReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 Highfirefox-esrDebianMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 High- Show moreLoading…