firefox-debugsource vulnerabilities (Red Hat)
1,049 vulnerabilities.
firefox-debugsourceRed HatWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 Mediumfirefox-debugsourceRed Hatlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 Highfirefox-debugsourceRed HatMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 Highfirefox-debugsourceRed HatMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-debugsourceRed HatA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 Highfirefox-debugsourceRed HatA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 Highfirefox-debugsourceRed HatAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 Mediumfirefox-debugsourceRed HatMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 Highfirefox-debugsourceRed HatWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 Highfirefox-debugsourceRed HatWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Mediumfirefox-debugsourceRed HatThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 Highfirefox-debugsourceRed HatIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 Highfirefox-debugsourceRed HatA malicious website that could create a popup could have resized the popup to overlay the address...6.5 Mediumfirefox-debugsourceRed HatIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 Mediumfirefox-debugsourceRed HatSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Criticalfirefox-debugsourceRed HatAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 Highfirefox-debugsourceRed HatIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 Highfirefox-debugsourceRed HatMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 Criticalfirefox-debugsourceRed HatAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 Mediumfirefox-debugsourceRed HatAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 Mediumfirefox-debugsourceRed HatA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 Highfirefox-debugsourceRed HatOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 Highfirefox-debugsourceRed HatWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 Mediumfirefox-debugsourceRed HatA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 Criticalfirefox-debugsourceRed HatA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 Criticalfirefox-debugsourceRed HatIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 Highfirefox-debugsourceRed HatAn attacker could have sent a message to the parent process where the contents were used to...8.8 Highfirefox-debugsourceRed HatMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 Criticalfirefox-debugsourceRed HatFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 Mediumfirefox-debugsourceRed HatWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 Mediumfirefox-debugsourceRed HatRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 Mediumfirefox-debugsourceRed HatAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 Mediumfirefox-debugsourceRed HatDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 Highfirefox-debugsourceRed HatMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 Highfirefox-debugsourceRed HatDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 Mediumfirefox-debugsourceRed HatWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 Mediumfirefox-debugsourceRed HatBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 Mediumfirefox-debugsourceRed HatIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 Highfirefox-debugsourceRed HatAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 Mediumfirefox-debugsourceRed Hat<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 Mediumfirefox-debugsourceRed HatWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 Highfirefox-debugsourceRed HatPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 Mediumfirefox-debugsourceRed HatIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 Criticalfirefox-debugsourceRed HatWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 Mediumfirefox-debugsourceRed HatAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 Highfirefox-debugsourceRed HatRegular expression denial of service in Rust's regex crate7.5 Highfirefox-debugsourceRed HatAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 Criticalfirefox-debugsourceRed HatRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 Highfirefox-debugsourceRed HatIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 Criticalfirefox-debugsourceRed Hatxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Critical- Show moreLoading…