firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 Criticalfirefox-debuginfoRed HatAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 Criticalfirefox-debuginfoRed HatMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 Criticalfirefox-debuginfoRed HatVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 Mediumfirefox-debuginfoRed HatUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 Mediumfirefox-debuginfoRed HatCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 Mediumfirefox-debuginfoRed HatA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 Criticalfirefox-debuginfoRed HatA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 Criticalfirefox-debuginfoRed HatA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 Criticalfirefox-debuginfoRed HatJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 Criticalfirefox-debuginfoRed HatThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 Criticalfirefox-debuginfoRed HatWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 Highfirefox-debuginfoRed HatURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 Mediumfirefox-debuginfoRed HatA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 Criticalfirefox-debuginfoRed HatHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 Highfirefox-debuginfoRed HatUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 Criticalfirefox-debuginfoRed HatJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 Criticalfirefox-debuginfoRed HatThe search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a...7.5 Highfirefox-debuginfoRed HatStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 Highfirefox-debuginfoRed HatThe name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have...9.8 Criticalfirefox-debuginfoRed HatA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 Highfirefox-debuginfoRed HatAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 Highfirefox-debuginfoRed HatThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 Highfirefox-debuginfoRed HatHTML tags received from the Pocket server will be processed without sanitization and any...9.8 Criticalfirefox-debuginfoRed HatExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 Highfirefox-debuginfoRed HatUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 Criticalfirefox-debuginfoRed HatUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 Criticalfirefox-debuginfoRed HatMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 Highfirefox-debuginfoRed HatEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Mediumfirefox-debuginfoRed HatMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 Highfirefox-debuginfoRed HatA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 Highfirefox-debuginfoRed HatAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Mediumfirefox-debuginfoRed HatAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Criticalfirefox-debuginfoRed HatA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 Highfirefox-debuginfoRed HatA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Mediumfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Criticalfirefox-debuginfoRed HatMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 Highfirefox-debuginfoRed HatUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 Criticalfirefox-debuginfoRed HatUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 Criticalfirefox-debuginfoRed HatHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 Highfirefox-debuginfoRed HatUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Critical- Show moreLoading…