firefox vulnerabilities (Mageia)
1,592 vulnerabilities.
firefoxMageiaSame-origin policy bypass in the Request Handling component6.5 MediumfirefoxMageiaJIT miscompilation in the JavaScript Engine: JIT component9.8 CriticalfirefoxMageiaPrivilege escalation in the Netmonitor component8.8 HighfirefoxMageiaPrivilege escalation in the Netmonitor component8.8 HighfirefoxMageiaSpoofing issue in the Downloads Panel component7.5 HighfirefoxMageiaJIT miscompilation in the JavaScript Engine: JIT component7.3 HighfirefoxMageiaJIT miscompilation in the JavaScript Engine: JIT component9.8 CriticalfirefoxMageiaPrivilege escalation in the DOM: Notifications component8.8 HighfirefoxMageiaSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 HighfirefoxMageiaUse-after-free in the WebRTC: Signaling component9.8 CriticalfirefoxMageiaUse-after-free in the WebRTC: Audio/Video component8.8 HighfirefoxMageiaSame-origin policy bypass in the DOM: Workers component8.1 HighfirefoxMageiaMitigation bypass in the DOM: Security component8.1 HighfirefoxMageiaSame-origin policy bypass in the DOM: Notifications component8.1 HighfirefoxMageiaIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 HighfirefoxMageiaSpoofing issue in Firefox3.4 LowfirefoxMageiaUse-after-free in the Audio/Video component8.8 HighfirefoxMageiaMitigation bypass in the DOM: Core & HTML component6.1 MediumfirefoxMageiaRace condition in the Graphics component7.5 HighfirefoxMageiaLZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly...5.9 MediumfirefoxMageiaMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighfirefoxMageiaMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighfirefoxMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxMageiaAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumfirefoxMageiaSome non-writable Object properties could be modified6.5 MediumfirefoxMageiaCross-process information leaked due to malicious IPC messages9.8 CriticalfirefoxMageiaOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalfirefoxMageiaUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalfirefoxMageiaMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighfirefoxMageiaInformation disclosure in the Networking: Cache component6.2 MediumfirefoxMageiaInteger overflow in the SVG component8.8 HighfirefoxMageiaIncorrect boundary conditions in the JavaScript: GC component6.5 MediumfirefoxMageiaSame-origin policy bypass in the Layout component6.5 MediumfirefoxMageiaSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighfirefoxMageiaSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighfirefoxMageialibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighfirefoxMageiaMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighfirefoxMageiaUninitialized memory in the JavaScript Engine component6.5 MediumfirefoxMageiaSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighfirefoxMageiaSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalfirefoxMageiaMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxMageiaMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxMageiaIncorrect JavaScript state machine for generators6.5 MediumfirefoxMageiaXSLT documents could bypass CSP8.1 HighfirefoxMageiaIncorrect URL stripping in CSP reports9.8 CriticalfirefoxMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxMageiajavascript: URLs executed on object and embed tags8.1 HighfirefoxMageiaLarge branch table could lead to truncated instruction9.8 CriticalfirefoxMageiaJavaScript engine only wrote partial return value to stack6.5 MediumfirefoxMageiaUpdated firefox packages fix security vulnerabilitiesNo score- Show moreLoading…