nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaUnexpected GC during RegExp bailout processing6.5 MediumnssMageiaJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighnssMageiaInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighnssMageiaUse-after-free in WebTransportChild7.5 HighnssMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalnssMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalnssMageiaCertificate length was not properly checked8.8 HighnssMageiaPotential opening of private browsing tabs in normal browsing windows6.5 MediumnssMageiaUse-after-free during concurrent delazification7.5 HighnssMageiaA bug in WebAssembly code generation could result in a crash8.8 HighnssMageiaUse-after-free in Custom Highlight8.8 HighnssMageiaUse-after-free in XSLT9.8 CriticalnssMageiaIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighnssMageiaMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighnssMageiaA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalnssMageiaWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighnssMageiaThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumnssMageiaA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumnssMageiaEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumnssMageiaAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumnssMageiaMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighnssMageiaBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighnssMageiaA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumnssMageiaRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumnssMageiaVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumnssMageiaTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumnssMageiaIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumnssMageiaThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumnssMageiaAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighnssMageiaA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighnssMageiaMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalnssMageiaIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumnssMageiaA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalnssMageiaThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalnssMageiaFirefox normally asks for confirmation before asking the operating system to find an application...7.5 HighnssMageiaInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighnssMageiaA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalnssMageiaCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 MediumnssMageiaThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumnssMageiaIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighnssMageiaUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighnssMageiaANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumnssMageiaIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighnssMageiaFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 MediumnssMageiaEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighnssMageiaIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighnssMageiaA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighnssMageiaInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalnssMageiaMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighnssMageiaMemory corruption in thread creation7.4 High- Show moreLoading…