nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaMemory corruption in NSS9.8 CriticalnssMageiaRace condition in permission assignment4.7 MediumnssMageiaMemory corruption in WebGL API6.3 MediumnssMageiaMemory corruption in the networking stack could have led to a potentially exploitable crash. This...7.5 HighnssMageiaMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 HighnssMageiaBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 HighnssMageiaOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 MediumnssMageiaBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 MediumnssMageiaBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 MediumnssMageiaIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 HighnssMageiaMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 HighnssMageiaWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 HighnssMageiaWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 MediumnssMageiaA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 MediumnssMageiaIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 MediumnssMageiaPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 HighnssMageiaAn attacker was able to inject an event handler into a privileged object that would allow...8.4 HighnssMageiaTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 LownssMageiaMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 HighnssMageiaIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 HighnssMageiaA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 MediumnssMageiaUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 MediumnssMageia`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 HighnssMageiaReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 HighnssMageiaMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighnssMageiaIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighnssMageiaSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumnssMageiaA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumnssMageiaIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumnssMageiaA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumnssMageiaThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumnssMageiaWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighnssMageiaAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 HighnssMageiaMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 HighnssMageiaIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumnssMageiaA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighnssMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighnssMageiaA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumnssMageiaWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumnssMageiaA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumnssMageiaIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumnssMageiaAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumnssMageiaThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 MediumnssMageia`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 MediumnssMageiaMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighnssMageiaThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighnssMageiaA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighnssMageiaThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighnssMageiaThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumnssMageiaA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 High- Show moreLoading…