nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 HighnssMageiaUse-after-free in the WebRTC: Signaling component9.8 CriticalnssMageiaMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighnssMageiaMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighnssMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighnssMageiaAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumnssMageiaSome non-writable Object properties could be modified6.5 MediumnssMageiaCross-process information leaked due to malicious IPC messages9.8 CriticalnssMageiaOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalnssMageiaUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalnssMageiaMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighnssMageiaInformation disclosure in the Networking: Cache component6.2 MediumnssMageiaInteger overflow in the SVG component8.8 HighnssMageiaIncorrect boundary conditions in the JavaScript: GC component6.5 MediumnssMageiaSame-origin policy bypass in the Layout component6.5 MediumnssMageiaSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighnssMageiaSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighnssMageialibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighnssMageiaMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighnssMageiaUninitialized memory in the JavaScript Engine component6.5 MediumnssMageiaSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighnssMageiaSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalnssMageiaMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighnssMageiaMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighnssMageiaIncorrect JavaScript state machine for generators6.5 MediumnssMageiaXSLT documents could bypass CSP8.1 HighnssMageiaIncorrect URL stripping in CSP reports9.8 CriticalnssMageiaPotential user-assisted code execution in “Copy as cURL” command8.1 HighnssMageiajavascript: URLs executed on object and embed tags8.1 HighnssMageiaLarge branch table could lead to truncated instruction9.8 CriticalnssMageiaJavaScript engine only wrote partial return value to stack6.5 MediumnssMageiaContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumnssMageiaIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumnssMageiaThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumnssMageiaUse-after-free in FontFaceSet9.8 CriticalnssMageiaMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighnssMageiaMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighnssMageiaClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumnssMageiaScript element events leaked cross-origin resource status4.3 MediumnssMageiaPotential local code execution in “Copy as cURL” command4.8 MediumnssMageiaError handling for script execution was incorrectly isolated from web content4.3 MediumnssMageiaOut-of-bounds access when optimizing linear sums8.8 HighnssMageiaOut-of-bounds access when resolving Promise objects9.8 CriticalnssMageiaMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighnssMageiaURL Bar Spoofing via non-BMP Unicode characters7.3 HighnssMageiaUse-after-free triggered by XSLTProcessor6.5 MediumnssMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumnssMageiaMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighnssMageiaAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighnssMageiaClickjacking the registerProtocolHandler info-bar4.3 Medium- Show moreLoading…