firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 HighfirefoxMageiaAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 CriticalfirefoxMageiaAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 CriticalfirefoxMageiaA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 HighfirefoxMageiaA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 HighfirefoxMageiaAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 CriticalfirefoxMageiaA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 CriticalfirefoxMageiaA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 CriticalfirefoxMageiaA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 CriticalfirefoxMageiaA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 CriticalfirefoxMageiaA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 CriticalfirefoxMageiaUpdated firefox packages fix security vulnerabilityNo scorefirefoxMageiaAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 HighfirefoxMageiaA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 CriticalfirefoxMageiaA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 CriticalfirefoxMageiaA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 CriticalfirefoxMageiaA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 CriticalfirefoxMageiaMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalfirefoxMageiaMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticalfirefoxMageiaVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumfirefoxMageiaUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumfirefoxMageiaCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumfirefoxMageiaA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalfirefoxMageiaA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalfirefoxMageiaA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalfirefoxMageiaJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalfirefoxMageiaMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalfirefoxMageiaA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalfirefoxMageiaThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalfirefoxMageiaWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 HighfirefoxMageiaURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumfirefoxMageiaA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalfirefoxMageiaHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighfirefoxMageiaUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalfirefoxMageiaJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalfirefoxMageiaMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalfirefoxMageiaA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 HighfirefoxMageiaAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighfirefoxMageiaThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 HighfirefoxMageiaHTML tags received from the Pocket server will be processed without sanitization and any...9.8 CriticalfirefoxMageiaExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighfirefoxMageiaUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalfirefoxMageiaUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalfirefoxMageiaMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighfirefoxMageiaEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumfirefoxMageiaMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalfirefoxMageiaA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighfirefoxMageiaAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 MediumfirefoxMageiaA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighfirefoxMageiaAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Medium- Show moreLoading…