firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 CriticalfirefoxRed HatUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 CriticalfirefoxRed HatThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 HighfirefoxRed HatHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 CriticalfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 CriticalfirefoxRed HatMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumfirefoxRed HatUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighfirefoxRed HatThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighfirefoxRed HatMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 MediumfirefoxRed HatInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 HighfirefoxRed HatUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 HighfirefoxRed HatUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 HighfirefoxRed HatUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 CriticalfirefoxRed HatStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 HighfirefoxRed HatMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 MediumfirefoxRed HatHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 HighfirefoxRed HatHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 MediumfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 HighfirefoxRed HatMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 MediumfirefoxRed HatMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 HighfirefoxRed HatUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 HighfirefoxRed HatMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 MediumfirefoxRed HatUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 HighfirefoxRed HatHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 HighfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 HighfirefoxRed HatHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 HighfirefoxRed HatThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 HighfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 HighfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...8.8 HighfirefoxRed HatUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...8.8 HighfirefoxRed HatThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...8.8 HighfirefoxRed HatRace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...8.8 HighfirefoxRed HatThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...8.8 HighfirefoxRed HatMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...4.3 MediumfirefoxRed HatUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...8.8 HighfirefoxRed HatUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...9.8 CriticalfirefoxRed HatUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...8.8 HighfirefoxRed HatInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...8.8 HighfirefoxRed Hatbrowser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...4.3 MediumfirefoxRed HatMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...4.3 MediumfirefoxRed HatThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...8.8 HighfirefoxRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...8.8 HighfirefoxRed HatThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...8.8 HighfirefoxRed HatThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...8.8 HighfirefoxRed HatThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighfirefoxRed HatHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...8.8 HighfirefoxRed HatThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighfirefoxRed HatThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...8.8 HighfirefoxRed HatHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...8.8 HighfirefoxRed HatThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 High- Show moreLoading…