firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighfirefoxMageiaDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumfirefoxMageiaWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumfirefoxMageiaBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumfirefoxMageiaIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighfirefoxMageiaAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumfirefoxMageia<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumfirefoxMageiaWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighfirefoxMageiaPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumfirefoxMageiaIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalfirefoxMageiaWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumfirefoxMageiaAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighfirefoxMageiaRegular expression denial of service in Rust's regex crate7.5 HighfirefoxMageiaAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalfirefoxMageiaRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighfirefoxMageiaIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalfirefoxMageiaxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalfirefoxMageiaxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalfirefoxMageiaMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxMageiaWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighfirefoxMageiaWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighfirefoxMageiaWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumfirefoxMageiaIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalfirefoxMageiaIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighfirefoxMageiaIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumfirefoxMageiaMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighfirefoxMageiaMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxMageiaAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxMageiaSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxMageiaWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxMageiaWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxMageiaWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxMageiaCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxMageiaMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxMageiaApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxMageiaConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxMageiaIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalfirefoxMageiaMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalfirefoxMageiaIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumfirefoxMageiaUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumfirefoxMageiaDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumfirefoxMageiaUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumfirefoxMageiaWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumfirefoxMageiaFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighfirefoxMageiaBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumfirefoxMageiaAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighfirefoxMageiaUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumfirefoxMageiaA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighfirefoxMageiaMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighfirefoxMageiaDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Medium- Show moreLoading…