firefox-debugsource vulnerabilities (Red Hat)
1,049 vulnerabilities.
firefox-debugsourceRed HatCross-process information leaked due to malicious IPC messages9.8 Criticalfirefox-debugsourceRed HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 Criticalfirefox-debugsourceRed HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highfirefox-debugsourceRed HatInformation disclosure in the Networking: Cache component6.2 Mediumfirefox-debugsourceRed HatInteger overflow in the SVG component8.8 Highfirefox-debugsourceRed HatIncorrect boundary conditions in the JavaScript: GC component6.5 Mediumfirefox-debugsourceRed HatSame-origin policy bypass in the Layout component6.5 Mediumfirefox-debugsourceRed HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highfirefox-debugsourceRed HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highfirefox-debugsourceRed HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highfirefox-debugsourceRed HatUninitialized memory in the JavaScript Engine component6.5 Mediumfirefox-debugsourceRed HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highfirefox-debugsourceRed HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-debugsourceRed HatIncorrect JavaScript state machine for generators6.5 Mediumfirefox-debugsourceRed HatXSLT documents could bypass CSP8.1 Highfirefox-debugsourceRed HatIncorrect URL stripping in CSP reports9.8 Criticalfirefox-debugsourceRed HatPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-debugsourceRed Hatjavascript: URLs executed on object and embed tags8.1 Highfirefox-debugsourceRed HatLarge branch table could lead to truncated instruction9.8 Criticalfirefox-debugsourceRed HatJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-debugsourceRed HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-debugsourceRed HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-debugsourceRed HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-debugsourceRed HatUse-after-free in FontFaceSet9.8 Criticalfirefox-debugsourceRed HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Mediumfirefox-debugsourceRed HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-debugsourceRed HatClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-debugsourceRed HatScript element events leaked cross-origin resource status4.3 Mediumfirefox-debugsourceRed HatPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-debugsourceRed HatError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-debugsourceRed HatOut-of-bounds access when optimizing linear sums8.8 Highfirefox-debugsourceRed HatOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-debugsourceRed HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-debugsourceRed HatUnsafe attribute access during XPath parsing4.8 Mediumfirefox-debugsourceRed HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-debugsourceRed HatPrivilege escalation in Thunderbird Updater8.8 Highfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-debugsourceRed HatURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-debugsourceRed HatUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-debugsourceRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-debugsourceRed HatAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-debugsourceRed HatClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-debugsourceRed HatUnexpected GC during RegExp bailout processing6.5 Medium- Show moreLoading…