nspr vulnerabilities (Mageia)
403 vulnerabilities.
nsprMageiaPrivilege escalation in the DOM: Networking component8.8 HighnsprMageiaSite isolation issue in the Graphics: CanvasWebGL component7.5 HighnsprMageiaMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 1518.8 HighnsprMageiaMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 1518.8 HighnsprMageiaPrivilege escalation in the Security component8.8 HighnsprMageiaDenial-of-service due to invalid pointer in the Audio/Video: Web Codecs component7.5 HighnsprMageiaMitigation bypass in the DOM: Security component8.1 HighnsprMageiaSpoofing issue in the Form Autofill component6.5 MediumnsprMageiaInformation disclosure, sandbox escape in the Security: Process Sandboxing component8.6 HighnsprMageiaPrivilege escalation in the Enterprise Policies component8.8 HighnsprMageiaInteger overflow in the Networking: JAR component9.8 CriticalnsprMageiaPrivilege escalation in the DOM: Workers component8.8 HighnsprMageiaIncorrect boundary conditions, integer overflow in the Audio/Video component7.5 HighnsprMageiaSandbox escape due to use-after-free in the Disability Access APIs component9.6 CriticalnsprMageiaSame-origin policy bypass in the Networking: HTTP component9.3 CriticalnsprMageiaUse-after-free in the DOM: Bindings (WebIDL) component7.3 HighnsprMageiaIncorrect boundary conditions in the Audio/Video: Web Codecs component7.5 HighnsprMageiaSandbox escape in the Profile Backup component9.8 CriticalnsprMageiaOther issue in the JavaScript Engine component5.3 MediumnsprMageiaIncorrect boundary conditions in the JavaScript Engine: JIT component6.5 MediumnsprMageiaMemory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 1468.1 HighnsprMageiaSame-origin policy bypass in the Request Handling component6.5 MediumnsprMageiaJIT miscompilation in the JavaScript Engine: JIT component9.8 CriticalnsprMageiaPrivilege escalation in the Netmonitor component8.8 HighnsprMageiaPrivilege escalation in the Netmonitor component8.8 HighnsprMageiaJIT miscompilation in the JavaScript Engine: JIT component7.3 HighnsprMageiaJIT miscompilation in the JavaScript Engine: JIT component9.8 CriticalnsprMageiaPrivilege escalation in the DOM: Notifications component8.8 HighnsprMageiaSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 HighnsprMageiaUse-after-free in the WebRTC: Signaling component9.8 CriticalnsprMageiaMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighnsprMageiaUninitialized memory in the JavaScript Engine component6.5 MediumnsprMageiaSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighnsprMageiaSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalnsprMageiaMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighnsprMageiaMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighnsprMageiaIncorrect JavaScript state machine for generators6.5 MediumnsprMageiaXSLT documents could bypass CSP8.1 HighnsprMageiaIncorrect URL stripping in CSP reports9.8 CriticalnsprMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighnsprMageiajavascript: URLs executed on object and embed tags8.1 HighnsprMageiaLarge branch table could lead to truncated instruction9.8 CriticalnsprMageiaJavaScript engine only wrote partial return value to stack6.5 MediumnsprMageiaMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighnsprMageiaBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighnsprMageiaA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumnsprMageiaRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumnsprMageiaVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumnsprMageiaTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumnsprMageiaIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Medium- Show moreLoading…