firefox-debuginfo vulnerabilities (Red Hat)
2,041 vulnerabilities.
firefox-debuginfoRed HatCross-process information leaked due to malicious IPC messages9.8 Criticalfirefox-debuginfoRed HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 Criticalfirefox-debuginfoRed HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highfirefox-debuginfoRed HatInformation disclosure in the Networking: Cache component6.2 Mediumfirefox-debuginfoRed HatInteger overflow in the SVG component8.8 Highfirefox-debuginfoRed HatIncorrect boundary conditions in the JavaScript: GC component6.5 Mediumfirefox-debuginfoRed HatSame-origin policy bypass in the Layout component6.5 Mediumfirefox-debuginfoRed HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highfirefox-debuginfoRed HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highfirefox-debuginfoRed HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highfirefox-debuginfoRed HatUninitialized memory in the JavaScript Engine component6.5 Mediumfirefox-debuginfoRed HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highfirefox-debuginfoRed HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-debuginfoRed HatIncorrect JavaScript state machine for generators6.5 Mediumfirefox-debuginfoRed HatXSLT documents could bypass CSP8.1 Highfirefox-debuginfoRed HatIncorrect URL stripping in CSP reports9.8 Criticalfirefox-debuginfoRed HatPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-debuginfoRed Hatjavascript: URLs executed on object and embed tags8.1 Highfirefox-debuginfoRed HatLarge branch table could lead to truncated instruction9.8 Criticalfirefox-debuginfoRed HatJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-debuginfoRed HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-debuginfoRed HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-debuginfoRed HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-debuginfoRed HatUse-after-free in FontFaceSet9.8 Criticalfirefox-debuginfoRed HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Mediumfirefox-debuginfoRed HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-debuginfoRed HatClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-debuginfoRed HatScript element events leaked cross-origin resource status4.3 Mediumfirefox-debuginfoRed HatPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-debuginfoRed HatError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-debuginfoRed HatOut-of-bounds access when optimizing linear sums8.8 Highfirefox-debuginfoRed HatOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-debuginfoRed HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-debuginfoRed HatUnsafe attribute access during XPath parsing4.8 Mediumfirefox-debuginfoRed HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-debuginfoRed HatPrivilege escalation in Thunderbird Updater8.8 Highfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-debuginfoRed HatURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-debuginfoRed HatUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-debuginfoRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-debuginfoRed HatAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-debuginfoRed HatClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-debuginfoRed HatUnexpected GC during RegExp bailout processing6.5 Medium- Show moreLoading…