firefox-esr vulnerabilities (Debian)
1,435 vulnerabilities.
firefox-esrDebianSame-origin policy bypass in the DOM: Notifications component8.1 Highfirefox-esrDebianIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 Highfirefox-esrDebianSpoofing issue in Firefox3.4 Lowfirefox-esrDebianUse-after-free in the Audio/Video component8.8 Highfirefox-esrDebianMitigation bypass in the DOM: Core & HTML component6.1 Mediumfirefox-esrDebianRace condition in the Graphics component7.5 Highfirefox-esrDebianMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 Highfirefox-esrDebianMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 Highfirefox-esrDebianAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 Mediumfirefox-esrDebianSome non-writable Object properties could be modified6.5 Mediumfirefox-esrDebianCross-process information leaked due to malicious IPC messages9.8 Criticalfirefox-esrDebianOut of bounds read/write in a privileged process triggered by WebGL textures9.8 Criticalfirefox-esrDebianUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalfirefox-esrDebianfirefox-esr - regression updateNo scorefirefox-esrDebianfirefox-esr - regression updateNo scorefirefox-esrDebianMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highfirefox-esrDebianInformation disclosure in the Networking: Cache component6.2 Mediumfirefox-esrDebianInteger overflow in the SVG component8.8 Highfirefox-esrDebianIncorrect boundary conditions in the JavaScript: GC component6.5 Mediumfirefox-esrDebianSame-origin policy bypass in the Layout component6.5 Mediumfirefox-esrDebianSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highfirefox-esrDebianSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highfirefox-esrDebianlibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 Highfirefox-esrDebianMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highfirefox-esrDebianUninitialized memory in the JavaScript Engine component6.5 Mediumfirefox-esrDebianSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highfirefox-esrDebianSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalfirefox-esrDebianMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-esrDebianMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-esrDebianIncorrect JavaScript state machine for generators6.5 Mediumfirefox-esrDebianXSLT documents could bypass CSP8.1 Highfirefox-esrDebianIncorrect URL stripping in CSP reports9.8 Criticalfirefox-esrDebianPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-esrDebianjavascript: URLs executed on object and embed tags8.1 Highfirefox-esrDebianLarge branch table could lead to truncated instruction9.8 Criticalfirefox-esrDebianJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-esrDebianContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-esrDebianIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-esrDebianThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-esrDebianUse-after-free in FontFaceSet9.8 Criticalfirefox-esrDebianUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Mediumfirefox-esrDebianMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-esrDebianMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-esrDebianClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-esrDebianScript element events leaked cross-origin resource status4.3 Mediumfirefox-esrDebianPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-esrDebianError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-esrDebianOut-of-bounds access when optimizing linear sums8.8 Highfirefox-esrDebianOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-esrDebianMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 High- Show moreLoading…