firefox-debugsource vulnerabilities (Red Hat)
1,049 vulnerabilities.
firefox-debugsourceRed Hatxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 Criticalfirefox-debugsourceRed HatMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-debugsourceRed HatWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 Highfirefox-debugsourceRed HatWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 Highfirefox-debugsourceRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 Mediumfirefox-debugsourceRed HatIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 Criticalfirefox-debugsourceRed HatIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 Highfirefox-debugsourceRed HatIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 Mediumfirefox-debugsourceRed HatMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 Highfirefox-debugsourceRed HatMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 Mediumfirefox-debugsourceRed HatAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 Mediumfirefox-debugsourceRed HatSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 Mediumfirefox-debugsourceRed HatWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 Mediumfirefox-debugsourceRed HatWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 Mediumfirefox-debugsourceRed HatWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 Highfirefox-debugsourceRed HatCertain network request objects were freed too early when releasing a network request handle....8.8 Highfirefox-debugsourceRed HatMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Mediumfirefox-debugsourceRed HatApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 Highfirefox-debugsourceRed HatConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 Highfirefox-debugsourceRed HataddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalfirefox-debugsourceRed Hatbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalfirefox-debugsourceRed HatdefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Criticalfirefox-debugsourceRed HatIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 Criticalfirefox-debugsourceRed HatMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 Criticalfirefox-debugsourceRed HatIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 Mediumfirefox-debugsourceRed HatUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Mediumfirefox-debugsourceRed HatDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 Mediumfirefox-debugsourceRed HatUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Mediumfirefox-debugsourceRed HatWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 Mediumfirefox-debugsourceRed HatFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 Highfirefox-debugsourceRed HatBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Mediumfirefox-debugsourceRed HatAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 Highfirefox-debugsourceRed HatUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Mediumfirefox-debugsourceRed HatA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 Highfirefox-debugsourceRed HatMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 Highfirefox-debugsourceRed HatDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Mediumfirefox-debugsourceRed HatBy displaying a form validity message in the correct location at the same time as a permission...4.3 Mediumfirefox-debugsourceRed HatThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Mediumfirefox-debugsourceRed HatThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Mediumfirefox-debugsourceRed HatWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 Highfirefox-debugsourceRed HatThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Criticalfirefox-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-debugsourceRed HatDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 Highfirefox-debugsourceRed HatThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 Mediumfirefox-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-debugsourceRed HatDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 Highfirefox-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 Highfirefox-debugsourceRed HatMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 Highfirefox-debugsourceRed HatFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 Highfirefox-debugsourceRed HatA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 High- Show moreLoading…