rootcerts vulnerabilities (Mageia)
567 vulnerabilities.
rootcertsMageiaAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumrootcertsMageia<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumrootcertsMageiaRegular expression denial of service in Rust's regex crate7.5 HighrootcertsMageiaAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalrootcertsMageiaRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighrootcertsMageiaIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalrootcertsMageiaxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalrootcertsMageiaxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalrootcertsMageiaMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighrootcertsMageiaMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumrootcertsMageiaAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumrootcertsMageiaSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumrootcertsMageiaWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumrootcertsMageiaWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumrootcertsMageiaWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighrootcertsMageiaCertain network request objects were freed too early when releasing a network request handle....8.8 HighrootcertsMageiaMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumrootcertsMageiaApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighrootcertsMageiaConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighrootcertsMageiaIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalrootcertsMageiaMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighrootcertsMageiaDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighrootcertsMageiaThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumrootcertsMageiaMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighrootcertsMageiaDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighrootcertsMageiaData race in crossbeam-deque9.8 CriticalrootcertsMageiaMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighrootcertsMageiaA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighrootcertsMageiaOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighrootcertsMageiaMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighrootcertsMageiaMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighrootcertsMageiaWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumrootcertsMageiaAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumrootcertsMageiaIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumrootcertsMageiaWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 HighrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalrootcertsMageiaA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...7.5 HighrootcertsMageiaUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighrootcertsMageiaWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighrootcertsMageiaBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumrootcertsMageiaFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumrootcertsMageiaMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighrootcertsMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumrootcertsMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighrootcertsMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighrootcertsMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumrootcertsMageiaDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighrootcertsMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalrootcertsMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Medium- Show moreLoading…