firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-esrDebianUnsafe attribute access during XPath parsing4.8 Mediumfirefox-esrDebianProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-esrDebianMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-esrDebianURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-esrDebianUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-esrDebianMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-esrDebianMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-esrDebianAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-esrDebianClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-esrDebianUnexpected GC during RegExp bailout processing6.5 Mediumfirefox-esrDebianJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highfirefox-esrDebianInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highfirefox-esrDebianUse-after-free in WebTransportChild7.5 Highfirefox-esrDebianMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalfirefox-esrDebianMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalfirefox-esrDebianCertificate length was not properly checked8.8 Highfirefox-esrDebianPotential opening of private browsing tabs in normal browsing windows6.5 Mediumfirefox-esrDebianUse-after-free during concurrent delazification7.5 Highfirefox-esrDebianA bug in WebAssembly code generation could result in a crash8.8 Highfirefox-esrDebianUse-after-free in Custom Highlight8.8 Highfirefox-esrDebianUse-after-free in XSLT9.8 Criticalfirefox-esrDebianMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumfirefox-esrDebianMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumfirefox-esrDebianMemory corruption when using JavaScript Text Segmentation7.7 Highfirefox-esrDebianCompartment mismatch when parsing JavaScript JSON module4.0 Mediumfirefox-esrDebianAlt-Svc ALPN validation failure when redirected4.0 Mediumfirefox-esrDebianUse-after-free when breaking lines in text5.3 Mediumfirefox-esrDebianWebChannel APIs susceptible to confused deputy attack5.4 Mediumfirefox-esrDebianIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 Highfirefox-esrDebianMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highfirefox-esrDebianA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 Criticalfirefox-esrDebianWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highfirefox-esrDebianThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumfirefox-esrDebianA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumfirefox-esrDebianEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumfirefox-esrDebianAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumfirefox-esrDebianMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highfirefox-esrDebianBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highfirefox-esrDebianA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumfirefox-esrDebianRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumfirefox-esrDebianVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumfirefox-esrDebianTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumfirefox-esrDebianIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumfirefox-esrDebianThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumfirefox-esrDebianAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highfirefox-esrDebianA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highfirefox-esrDebianAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalfirefox-esrDebianMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalfirefox-esrDebianAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 High- Show moreLoading…