firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighfirefoxMageiaUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumfirefoxMageiaMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighfirefoxMageiaSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumfirefoxMageiaWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumfirefoxMageiaIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighfirefoxMageiaDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighfirefoxMageiaFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumfirefoxMageiaIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumfirefoxMageiaIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumfirefoxMageiaA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumfirefoxMageiaSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumfirefoxMageiaIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalfirefoxMageiaA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...7.5 HighfirefoxMageiaUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighfirefoxMageiaWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighfirefoxMageiaBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumfirefoxMageiaFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumfirefoxMageiaMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighfirefoxMageiaWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighfirefoxMageiaBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumfirefoxMageiaA flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55....9.1 CriticalfirefoxMageiaWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 MediumfirefoxMageiaDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 MediumfirefoxMageiaWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 MediumfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighfirefoxMageiaBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumfirefoxMageiaInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumfirefoxMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumfirefoxMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighfirefoxMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighfirefoxMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumfirefoxMageiaDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighfirefoxMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighfirefoxMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalfirefoxMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumfirefoxMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighfirefoxMageiaMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalfirefoxMageiaOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighfirefoxMageiaWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighfirefoxMageiaUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighfirefoxMageiaUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighfirefoxMageiaMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalfirefoxMageiaThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumfirefoxMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighfirefoxMageiaWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighfirefoxMageiaBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighfirefoxMageiaWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 High- Show moreLoading…