rootcerts vulnerabilities (Mageia)
567 vulnerabilities.
rootcertsMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalrootcertsMageiaMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalrootcertsMageiaCertificate length was not properly checked8.8 HighrootcertsMageiaPotential opening of private browsing tabs in normal browsing windows6.5 MediumrootcertsMageiaUse-after-free during concurrent delazification7.5 HighrootcertsMageiaA bug in WebAssembly code generation could result in a crash8.8 HighrootcertsMageiaUse-after-free in Custom Highlight8.8 HighrootcertsMageiaUse-after-free in XSLT9.8 CriticalrootcertsMageiaMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighrootcertsMageiaA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalrootcertsMageiaWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighrootcertsMageiaThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumrootcertsMageiaA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumrootcertsMageiaEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumrootcertsMageiaAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumrootcertsMageiaMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalrootcertsMageiaIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumrootcertsMageiaA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalrootcertsMageiaThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalrootcertsMageiaFirefox normally asks for confirmation before asking the operating system to find an application...7.5 HighrootcertsMageiaInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighrootcertsMageiaA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalrootcertsMageiaCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 MediumrootcertsMageiaThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumrootcertsMageiaIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighrootcertsMageiaUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighrootcertsMageiaANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumrootcertsMageiaIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighrootcertsMageiaFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 MediumrootcertsMageiaEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighrootcertsMageiaIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighrootcertsMageiaA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighrootcertsMageiaInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalrootcertsMageiaMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 HighrootcertsMageiaIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 HighrootcertsMageiaSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 MediumrootcertsMageiaA malicious website could have used a combination of exiting fullscreen mode and ...6.1 MediumrootcertsMageiaIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 MediumrootcertsMageiaA website could have obscured the fullscreen notification by using a dropdown select input...4.3 MediumrootcertsMageiaThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 MediumrootcertsMageiaWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 HighrootcertsMageiaMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighrootcertsMageiaRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumrootcertsMageiaWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighrootcertsMageiaOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighrootcertsMageiaThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumrootcertsMageiaIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumrootcertsMageiaOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumrootcertsMageiaNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumrootcertsMageiaDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 High- Show moreLoading…