firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 Criticalfirefox-debuginfoRed HatA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 Highfirefox-debuginfoRed HatSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 Mediumfirefox-debuginfoRed HatAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Criticalfirefox-debuginfoRed HatMalicious PDF can inject JavaScript into PDF Viewer8.8 Highfirefox-debuginfoRed HatSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 Highfirefox-debuginfoRed HatA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 Criticalfirefox-debuginfoRed HatAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 Highfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 Criticalfirefox-debuginfoRed HatAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 Highfirefox-debuginfoRed HatUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 Mediumfirefox-debuginfoRed HatWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 Highfirefox-debuginfoRed HatA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 Highfirefox-debuginfoRed HatA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 Highfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 Highfirefox-debuginfoRed HatA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 Criticalfirefox-debuginfoRed HatIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Mediumfirefox-debuginfoRed HatA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Criticalfirefox-debuginfoRed HatAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Criticalfirefox-debuginfoRed HatWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 Highfirefox-debuginfoRed HatThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 Mediumfirefox-debuginfoRed HatA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 Criticalfirefox-debuginfoRed HatTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Mediumfirefox-debuginfoRed HatA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 Criticalfirefox-debuginfoRed HatThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 Mediumfirefox-debuginfoRed HatA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 Criticalfirefox-debuginfoRed HatFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 Highfirefox-debuginfoRed HatMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 Criticalfirefox-debuginfoRed HatA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 Highfirefox-debuginfoRed HatWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 Highfirefox-debuginfoRed HatA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 Criticalfirefox-debuginfoRed HatA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 Criticalfirefox-debuginfoRed HatThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 Highfirefox-debuginfoRed HatA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 Criticalfirefox-debuginfoRed HatOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 Medium- Show moreLoading…