firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 Highfirefox-debuginfoRed HatInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 Highfirefox-debuginfoRed HatUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 Highfirefox-debuginfoRed HatData race in crossbeam-deque9.8 Criticalfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 Highfirefox-debuginfoRed HatA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 Highfirefox-debuginfoRed HatOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 Highfirefox-debuginfoRed HatPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 Highfirefox-debuginfoRed HatThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Mediumfirefox-debuginfoRed HatWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 Highfirefox-debuginfoRed HatIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 Highfirefox-debuginfoRed HatThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Mediumfirefox-debuginfoRed HatWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 Highfirefox-debuginfoRed HatA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 Highfirefox-debuginfoRed HatAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 Criticalfirefox-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 Highfirefox-debuginfoRed HatA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Mediumfirefox-debuginfoRed HatUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Mediumfirefox-debuginfoRed HatA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 Highfirefox-debuginfoRed HatWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Mediumfirefox-debuginfoRed HatAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Mediumfirefox-debuginfoRed HatIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Mediumfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 Highfirefox-debuginfoRed HatFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 Highfirefox-debuginfoRed HatPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 Highfirefox-debuginfoRed HatUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highfirefox-debuginfoRed HatIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediumfirefox-debuginfoRed HatUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 Highfirefox-debuginfoRed HatWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediumfirefox-debuginfoRed HatUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediumfirefox-debuginfoRed HatWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediumfirefox-debuginfoRed HatWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highfirefox-debuginfoRed HatCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highfirefox-debuginfoRed HatCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highfirefox-debuginfoRed HatUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Mediumfirefox-debuginfoRed HatMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highfirefox-debuginfoRed HatSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediumfirefox-debuginfoRed HatWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediumfirefox-debuginfoRed HatIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highfirefox-debuginfoRed HatDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highfirefox-debuginfoRed HatFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediumfirefox-debuginfoRed HatIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediumfirefox-debuginfoRed HatIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediumfirefox-debuginfoRed HatA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediumfirefox-debuginfoRed HatSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediumfirefox-debuginfoRed HatIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highfirefox-debuginfoRed HatMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Critical- Show moreLoading…