nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighnssMageiaWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumnssMageiaThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighnssMageiaMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighnssMageiaRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumnssMageiaWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighnssMageiaOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighnssMageiaThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumnssMageiaIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumnssMageiaOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumnssMageiaAddress bar spoofing via bidirectional characters6.5 MediumnssMageiaMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalnssMageiaDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighnssMageiaA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumnssMageiaDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighnssMageiaIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumnssMageiaNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumnssMageiaDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighnssMageiaInteger Overflow in RecordedSourceSurfaceCreation8.6 HighnssMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighnssMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighnssMageiaBrowsing Context potentially not cleared when closing Private Window7.5 HighnssMageiaXLL file extensions were downloadable without warnings4.3 MediumnssMageiaPush notifications saved to disk unencrypted6.5 MediumnssMageiaError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumnssMageiaMemory corruption in JIT UpdateRegExpStatics6.5 MediumnssMageiaMemory corruption in IPC FilePickerShownCallback6.5 MediumnssMageiaMemory corruption in IPC ColorPickerShownCallback6.5 MediumnssMageiaMemory corruption in IPC CanvasTranslator6.5 MediumnssMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalnssMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalnssMageiaWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighnssMageiaFull screen notification obscured by external program6.5 MediumnssMageiaFull screen notification obscured by file open dialog7.5 HighnssMageiaIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighnssMageiaRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumnssMageiaAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighnssMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighnssMageiaIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumnssMageiaOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumnssMageiaFile Extension Spoofing using the Text Direction Override Character7.5 HighnssMageiaUse-after-free in workers8.8 HighnssMageiaMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighnssMageiaWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighnssMageiaA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumnssMageiaCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighnssMageiaAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighnssMageiaMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalnssMageiaThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LownssMageiaMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 High- Show moreLoading…