firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumfirefoxMageiaIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumfirefoxMageiaThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumfirefoxMageiaUse-after-free in FontFaceSet9.8 CriticalfirefoxMageiaMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighfirefoxMageiaMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighfirefoxMageiaClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumfirefoxMageiaScript element events leaked cross-origin resource status4.3 MediumfirefoxMageiaPotential local code execution in “Copy as cURL” command4.8 MediumfirefoxMageiaError handling for script execution was incorrectly isolated from web content4.3 MediumfirefoxMageiaOut-of-bounds access when optimizing linear sums8.8 HighfirefoxMageiaOut-of-bounds access when resolving Promise objects9.8 CriticalfirefoxMageiaMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighfirefoxMageiaMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighfirefoxMageiaUnsafe attribute access during XPath parsing4.8 MediumfirefoxMageiaProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalfirefoxMageiaMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighfirefoxMageiaURL Bar Spoofing via non-BMP Unicode characters7.3 HighfirefoxMageiaUse-after-free triggered by XSLTProcessor6.5 MediumfirefoxMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumfirefoxMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighfirefoxMageiaAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighfirefoxMageiaClickjacking the registerProtocolHandler info-bar4.3 MediumfirefoxMageiaUnexpected GC during RegExp bailout processing6.5 MediumfirefoxMageiaJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighfirefoxMageiaInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighfirefoxMageiaUse-after-free in WebTransportChild7.5 HighfirefoxMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalfirefoxMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalfirefoxMageiaCertificate length was not properly checked8.8 HighfirefoxMageiaPotential opening of private browsing tabs in normal browsing windows6.5 MediumfirefoxMageiaUse-after-free during concurrent delazification7.5 HighfirefoxMageiaA bug in WebAssembly code generation could result in a crash8.8 HighfirefoxMageiaUse-after-free in Custom Highlight8.8 HighfirefoxMageiaUse-after-free in XSLT9.8 CriticalfirefoxMageiaMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumfirefoxMageiaMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumfirefoxMageiaMemory corruption when using JavaScript Text Segmentation7.7 HighfirefoxMageiaCompartment mismatch when parsing JavaScript JSON module4.0 MediumfirefoxMageiaAlt-Svc ALPN validation failure when redirected4.0 MediumfirefoxMageiaUse-after-free when breaking lines in text5.3 MediumfirefoxMageiaWebChannel APIs susceptible to confused deputy attack5.4 MediumfirefoxMageiaIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighfirefoxMageiaMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighfirefoxMageiaA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalfirefoxMageiaWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighfirefoxMageiaThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumfirefoxMageiaA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumfirefoxMageiaEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumfirefoxMageiaAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Medium- Show moreLoading…