firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumfirefoxMageiaSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumfirefoxMageiaWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighfirefoxMageiaActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumfirefoxMageiaA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumfirefoxMageiaUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighfirefoxMageiaDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumfirefoxMageiaNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalfirefoxMageiaPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighfirefoxMageiaWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalfirefoxMageiaInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalfirefoxMageiaA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighfirefoxMageiaA race condition is present in the crash generation server used to generate data for the crash...8.3 HighfirefoxMageiaA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalfirefoxMageiaA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalfirefoxMageiaImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumfirefoxMageiaA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalfirefoxMageiaIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumfirefoxMageiaThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalfirefoxMageiaIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighfirefoxMageiaIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighfirefoxMageiaCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumfirefoxMageiaA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalfirefoxMageiaA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalfirefoxMageiaA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumfirefoxMageiaThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalfirefoxMageiaThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalfirefoxMageiaLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 MediumfirefoxMageiaIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumfirefoxMageiapng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumfirefoxMageiaWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumfirefoxMageiaAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalfirefoxMageiaCross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumfirefoxMageiaA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalfirefoxMageiaA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumfirefoxMageiaA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalfirefoxMageiaA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalfirefoxMageiaAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighfirefoxMageiaIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 High- Show moreLoading…