firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highfirefox-debuginfoRed HatWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highfirefox-debuginfoRed HatBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Mediumfirefox-debuginfoRed HatFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highfirefox-debuginfoRed HatWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 Highfirefox-debuginfoRed HatBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediumfirefox-debuginfoRed HatUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 Mediumfirefox-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highfirefox-debuginfoRed HatThe code for downloading files did not properly take care of special characters, which led to an...6.5 Mediumfirefox-debuginfoRed HatJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 Highfirefox-debuginfoRed HatWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Mediumfirefox-debuginfoRed HatAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Mediumfirefox-debuginfoRed HatBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumfirefox-debuginfoRed HatInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumfirefox-debuginfoRed HatDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Mediumfirefox-debuginfoRed HatWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Mediumfirefox-debuginfoRed HatIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 Highfirefox-debuginfoRed HatWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumfirefox-debuginfoRed HatWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highfirefox-debuginfoRed HatWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highfirefox-debuginfoRed HatManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumfirefox-debuginfoRed HatDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highfirefox-debuginfoRed HatMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highfirefox-debuginfoRed HatWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumfirefox-debuginfoRed HatUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highfirefox-debuginfoRed HatIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 Criticalfirefox-debuginfoRed HatA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalfirefox-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalfirefox-debuginfoRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumfirefox-debuginfoRed HatA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highfirefox-debuginfoRed HatMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalfirefox-debuginfoRed HatOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 Highfirefox-debuginfoRed HatWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highfirefox-debuginfoRed HatUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highfirefox-debuginfoRed HatUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalfirefox-debuginfoRed HatThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumfirefox-debuginfoRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highfirefox-debuginfoRed HatWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highfirefox-debuginfoRed HatBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highfirefox-debuginfoRed HatWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highfirefox-debuginfoRed Hatusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumfirefox-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highfirefox-debuginfoRed HatIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumfirefox-debuginfoRed HatA content process could have modified shared memory relating to crash reporting information,...8.8 Highfirefox-debuginfoRed HatIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highfirefox-debuginfoRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Medium- Show moreLoading…