rootcerts vulnerabilities (Mageia)
567 vulnerabilities.
rootcertsMageiaInteger Overflow in RecordedSourceSurfaceCreation8.6 HighrootcertsMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighrootcertsMageiaMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighrootcertsMageiaBrowsing Context potentially not cleared when closing Private Window7.5 HighrootcertsMageiaXLL file extensions were downloadable without warnings4.3 MediumrootcertsMageiaPush notifications saved to disk unencrypted6.5 MediumrootcertsMageiaError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumrootcertsMageiaMemory corruption in JIT UpdateRegExpStatics6.5 MediumrootcertsMageiaMemory corruption in IPC FilePickerShownCallback6.5 MediumrootcertsMageiaMemory corruption in IPC ColorPickerShownCallback6.5 MediumrootcertsMageiaMemory corruption in IPC CanvasTranslator6.5 MediumrootcertsMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalrootcertsMageiaMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalrootcertsMageiaWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighrootcertsMageiaFull screen notification obscured by external program6.5 MediumrootcertsMageiaFull screen notification obscured by file open dialog7.5 HighrootcertsMageiaIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighrootcertsMageiaRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumrootcertsMageiaAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighrootcertsMageiaA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighrootcertsMageiaIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumrootcertsMageiaOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumrootcertsMageiaFile Extension Spoofing using the Text Direction Override Character7.5 HighrootcertsMageiaUse-after-free in workers8.8 HighrootcertsMageiaMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighrootcertsMageiaWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighrootcertsMageiaAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumrootcertsMageiaA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumrootcertsMageiaA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighrootcertsMageiaAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumrootcertsMageiaIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumrootcertsMageiaUpdated rootcerts packages fix security vulnerabilityNo scorerootcertsMageiaMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighrootcertsMageiaConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumrootcertsMageiaDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumrootcertsMageiaBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumrootcertsMageiaWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumrootcertsMageiaThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighrootcertsMageiaIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighrootcertsMageiaA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumrootcertsMageiaIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumrootcertsMageiaSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalrootcertsMageiaAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighrootcertsMageiaIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighrootcertsMageiaAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumrootcertsMageiaMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighrootcertsMageiaDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumrootcertsMageiaWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumrootcertsMageiaBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumrootcertsMageiaIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 High- Show moreLoading…