firefox-x11 vulnerabilities (Red Hat)
746 vulnerabilities.
firefox-x11Red HatCross-process information leaked due to malicious IPC messages9.8 Criticalfirefox-x11Red HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 Criticalfirefox-x11Red HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalfirefox-x11Red HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highfirefox-x11Red HatInformation disclosure in the Networking: Cache component6.2 Mediumfirefox-x11Red HatInteger overflow in the SVG component8.8 Highfirefox-x11Red HatIncorrect boundary conditions in the JavaScript: GC component6.5 Mediumfirefox-x11Red HatSame-origin policy bypass in the Layout component6.5 Mediumfirefox-x11Red HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highfirefox-x11Red HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highfirefox-x11Red HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 Highfirefox-x11Red HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highfirefox-x11Red HatUninitialized memory in the JavaScript Engine component6.5 Mediumfirefox-x11Red HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highfirefox-x11Red HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalfirefox-x11Red HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-x11Red HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-x11Red HatIncorrect JavaScript state machine for generators6.5 Mediumfirefox-x11Red HatXSLT documents could bypass CSP8.1 Highfirefox-x11Red HatIncorrect URL stripping in CSP reports9.8 Criticalfirefox-x11Red HatPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-x11Red Hatjavascript: URLs executed on object and embed tags8.1 Highfirefox-x11Red HatLarge branch table could lead to truncated instruction9.8 Criticalfirefox-x11Red HatJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-x11Red HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-x11Red HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-x11Red HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-x11Red HatUse-after-free in FontFaceSet9.8 Criticalfirefox-x11Red HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Mediumfirefox-x11Red HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-x11Red HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-x11Red HatClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-x11Red HatScript element events leaked cross-origin resource status4.3 Mediumfirefox-x11Red HatPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-x11Red HatError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-x11Red HatOut-of-bounds access when optimizing linear sums8.8 Highfirefox-x11Red HatOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-x11Red HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 Highfirefox-x11Red HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-x11Red HatUnsafe attribute access during XPath parsing4.8 Mediumfirefox-x11Red HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-x11Red HatPrivilege escalation in Thunderbird Updater8.8 Highfirefox-x11Red HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-x11Red HatURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-x11Red HatUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-x11Red HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-x11Red HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-x11Red HatAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-x11Red HatClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-x11Red HatUnexpected GC during RegExp bailout processing6.5 Medium- Show moreLoading…