firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highfirefox-debuginfoRed HatInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highfirefox-debuginfoRed HatUse-after-free in WebTransportChild7.5 Highfirefox-debuginfoRed HatAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalfirefox-debuginfoRed HatCertificate length was not properly checked8.8 Highfirefox-debuginfoRed HatPotential opening of private browsing tabs in normal browsing windows6.5 Mediumfirefox-debuginfoRed HatUse-after-free during concurrent delazification7.5 Highfirefox-debuginfoRed HatA bug in WebAssembly code generation could result in a crash8.8 Highfirefox-debuginfoRed HatUse-after-free in Custom Highlight8.8 Highfirefox-debuginfoRed HatUse-after-free in XSLT9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumfirefox-debuginfoRed HatMemory corruption when using JavaScript Text Segmentation7.7 Highfirefox-debuginfoRed HatCompartment mismatch when parsing JavaScript JSON module4.0 Mediumfirefox-debuginfoRed HatAlt-Svc ALPN validation failure when redirected4.0 Mediumfirefox-debuginfoRed HatUse-after-free when breaking lines in text5.3 Mediumfirefox-debuginfoRed HatWebChannel APIs susceptible to confused deputy attack5.4 Mediumfirefox-debuginfoRed Hatidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 Mediumfirefox-debuginfoRed HatMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highfirefox-debuginfoRed HatWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highfirefox-debuginfoRed HatThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumfirefox-debuginfoRed HatA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumfirefox-debuginfoRed HatEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumfirefox-debuginfoRed HatAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumfirefox-debuginfoRed HatMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highfirefox-debuginfoRed HatBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highfirefox-debuginfoRed HatA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumfirefox-debuginfoRed HatRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumfirefox-debuginfoRed HatVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumfirefox-debuginfoRed HatTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumfirefox-debuginfoRed HatIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumfirefox-debuginfoRed HatThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumfirefox-debuginfoRed HatAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highfirefox-debuginfoRed HatA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highfirefox-debuginfoRed HatAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 Highfirefox-debuginfoRed HatMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalfirefox-debuginfoRed HatA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highfirefox-debuginfoRed HatA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highfirefox-debuginfoRed HatBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediumfirefox-debuginfoRed HatA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediumfirefox-debuginfoRed HatIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highfirefox-debuginfoRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-debuginfoRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-debuginfoRed HatA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalfirefox-debuginfoRed HatAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 Highfirefox-debuginfoRed HatMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Critical- Show moreLoading…