firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighfirefoxMageiaFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighfirefoxMageiaWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumfirefoxMageiaThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighfirefoxMageiaMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighfirefoxMageiaRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumfirefoxMageiaWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighfirefoxMageiaOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighfirefoxMageiaThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumfirefoxMageiaIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumfirefoxMageiaOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumfirefoxMageiaAddress bar spoofing via bidirectional characters6.5 MediumfirefoxMageiaMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalfirefoxMageiaDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighfirefoxMageiaA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumfirefoxMageiaDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighfirefoxMageiaIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumfirefoxMageiaNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumfirefoxMageiaElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighfirefoxMageiaMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalfirefoxMageiaDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumfirefoxMageiaA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumfirefoxMageiaDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighfirefoxMageiaInteger Overflow in RecordedSourceSurfaceCreation8.6 HighfirefoxMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighfirefoxMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighfirefoxMageiaBrowsing Context potentially not cleared when closing Private Window7.5 HighfirefoxMageiaXLL file extensions were downloadable without warnings4.3 MediumfirefoxMageiaPush notifications saved to disk unencrypted6.5 MediumfirefoxMageiaError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumfirefoxMageiaMemory corruption in JIT UpdateRegExpStatics6.5 MediumfirefoxMageiaMemory corruption in IPC FilePickerShownCallback6.5 MediumfirefoxMageiaMemory corruption in IPC ColorPickerShownCallback6.5 MediumfirefoxMageiaMemory corruption in IPC CanvasTranslator6.5 MediumfirefoxMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalfirefoxMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalfirefoxMageiaWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighfirefoxMageiaFull screen notification obscured by external program6.5 MediumfirefoxMageiaFull screen notification obscured by file open dialog7.5 HighfirefoxMageiaIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighfirefoxMageiaRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumfirefoxMageiaAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighfirefoxMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighfirefoxMageiaIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumfirefoxMageiaOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumfirefoxMageiaFile Extension Spoofing using the Text Direction Override Character7.5 HighfirefoxMageiaUse-after-free in workers8.8 HighfirefoxMageiaMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighfirefoxMageiaWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighfirefoxMageiaA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Medium- Show moreLoading…