firefox-l10n vulnerabilities (Mageia)
1,579 vulnerabilities.
firefox-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highfirefox-l10nMageiaWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 Highfirefox-l10nMageiaBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumfirefox-l10nMageiaA flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55....9.1 Criticalfirefox-l10nMageiaWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 Mediumfirefox-l10nMageiaDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Mediumfirefox-l10nMageiaWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 Mediumfirefox-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highfirefox-l10nMageiaBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumfirefox-l10nMageiaInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumfirefox-l10nMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumfirefox-l10nMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highfirefox-l10nMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highfirefox-l10nMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumfirefox-l10nMageiaDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highfirefox-l10nMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highfirefox-l10nMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalfirefox-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalfirefox-l10nMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumfirefox-l10nMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highfirefox-l10nMageiaMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalfirefox-l10nMageiaOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highfirefox-l10nMageiaWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highfirefox-l10nMageiaUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highfirefox-l10nMageiaUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highfirefox-l10nMageiaMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalfirefox-l10nMageiaThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumfirefox-l10nMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highfirefox-l10nMageiaWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highfirefox-l10nMageiaBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highfirefox-l10nMageiaWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highfirefox-l10nMageiausrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumfirefox-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highfirefox-l10nMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumfirefox-l10nMageiaA content process could have modified shared memory relating to crash reporting information,...8.8 Highfirefox-l10nMageiaIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highfirefox-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highfirefox-l10nMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-l10nMageiaDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 Highfirefox-l10nMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-l10nMageiaWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 Highfirefox-l10nMageiaInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Mediumfirefox-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highfirefox-l10nMageiaUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highfirefox-l10nMageiaUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highfirefox-l10nMageiaWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highfirefox-l10nMageiaThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highfirefox-l10nMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highfirefox-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highfirefox-l10nMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Medium- Show moreLoading…