firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiausrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighfirefoxMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumfirefoxMageiaA content process could have modified shared memory relating to crash reporting information,...8.8 HighfirefoxMageiaIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighfirefoxMageiaMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighfirefoxMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumfirefoxMageiaDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighfirefoxMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumfirefoxMageiaWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighfirefoxMageiaInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumfirefoxMageiaMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighfirefoxMageiaUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighfirefoxMageiaUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighfirefoxMageiaWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighfirefoxMageiaThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighfirefoxMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighfirefoxMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumfirefoxMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumfirefoxMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumfirefoxMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighfirefoxMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighfirefoxMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighfirefoxMageiaThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighfirefoxMageiaLogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighfirefoxMageiaThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighfirefoxMageiaGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalfirefoxMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighfirefoxMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighfirefoxMageiaA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumfirefoxMageiaA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumfirefoxMageiaWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumfirefoxMageiaThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumfirefoxMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighfirefoxMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumfirefoxMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowfirefoxMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighfirefoxMageiaIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighfirefoxMageiaWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalfirefoxMageiaAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighfirefoxMageiaA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumfirefoxMageiaEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighfirefoxMageiaThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumfirefoxMageiaA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumfirefoxMageiaWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumfirefoxMageiaApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumfirefoxMageiaA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 High- Show moreLoading…