firefox-debugsource vulnerabilities (Red Hat)
1,049 vulnerabilities.
firefox-debugsourceRed HatJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highfirefox-debugsourceRed HatInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highfirefox-debugsourceRed HatUse-after-free in WebTransportChild7.5 Highfirefox-debugsourceRed HatAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalfirefox-debugsourceRed HatCertificate length was not properly checked8.8 Highfirefox-debugsourceRed HatPotential opening of private browsing tabs in normal browsing windows6.5 Mediumfirefox-debugsourceRed HatUse-after-free during concurrent delazification7.5 Highfirefox-debugsourceRed HatA bug in WebAssembly code generation could result in a crash8.8 Highfirefox-debugsourceRed HatUse-after-free in Custom Highlight8.8 Highfirefox-debugsourceRed HatUse-after-free in XSLT9.8 Criticalfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumfirefox-debugsourceRed HatMemory corruption when using JavaScript Text Segmentation7.7 Highfirefox-debugsourceRed HatCompartment mismatch when parsing JavaScript JSON module4.0 Mediumfirefox-debugsourceRed HatAlt-Svc ALPN validation failure when redirected4.0 Mediumfirefox-debugsourceRed HatUse-after-free when breaking lines in text5.3 Mediumfirefox-debugsourceRed HatWebChannel APIs susceptible to confused deputy attack5.4 Mediumfirefox-debugsourceRed Hatidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 Mediumfirefox-debugsourceRed HatMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highfirefox-debugsourceRed HatWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highfirefox-debugsourceRed HatThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumfirefox-debugsourceRed HatA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumfirefox-debugsourceRed HatEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumfirefox-debugsourceRed HatAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumfirefox-debugsourceRed HatMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highfirefox-debugsourceRed HatBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highfirefox-debugsourceRed HatA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumfirefox-debugsourceRed HatRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumfirefox-debugsourceRed HatVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumfirefox-debugsourceRed HatTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumfirefox-debugsourceRed HatIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumfirefox-debugsourceRed HatThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumfirefox-debugsourceRed HatAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highfirefox-debugsourceRed HatA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highfirefox-debugsourceRed HatAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalfirefox-debugsourceRed HatMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 Highfirefox-debugsourceRed HatMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalfirefox-debugsourceRed HatMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalfirefox-debugsourceRed HatA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highfirefox-debugsourceRed HatA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highfirefox-debugsourceRed HatBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediumfirefox-debugsourceRed HatA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediumfirefox-debugsourceRed HatIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highfirefox-debugsourceRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-debugsourceRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-debugsourceRed HatA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalfirefox-debugsourceRed HatAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 Highfirefox-debugsourceRed HatMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Critical- Show moreLoading…