firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 CriticalfirefoxRed HatA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 CriticalfirefoxRed HatA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 CriticalfirefoxRed HatA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalfirefoxRed HatAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 CriticalfirefoxRed HatMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticalfirefoxRed HatVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumfirefoxRed HatUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumfirefoxRed HatCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumfirefoxRed HatA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalfirefoxRed HatA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalfirefoxRed HatA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalfirefoxRed HatJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalfirefoxRed HatA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalfirefoxRed HatThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalfirefoxRed HatWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 HighfirefoxRed HatURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumfirefoxRed HatA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalfirefoxRed HatHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighfirefoxRed HatUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalfirefoxRed HatJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalfirefoxRed HatThe search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a...7.5 HighfirefoxRed HatStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 HighfirefoxRed HatThe name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have...9.8 CriticalfirefoxRed HatA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 HighfirefoxRed HatAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighfirefoxRed HatThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 HighfirefoxRed HatHTML tags received from the Pocket server will be processed without sanitization and any...9.8 CriticalfirefoxRed HatExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighfirefoxRed HatUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalfirefoxRed HatUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalfirefoxRed HatMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighfirefoxRed HatEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumfirefoxRed HatMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalfirefoxRed HatA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighfirefoxRed HatA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighfirefoxRed HatAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 MediumfirefoxRed HatAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalfirefoxRed HatA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighfirefoxRed HatA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumfirefoxRed HatMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalfirefoxRed HatMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 HighfirefoxRed HatUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 CriticalfirefoxRed HatUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 CriticalfirefoxRed HatHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 HighfirefoxRed HatUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Critical- Show moreLoading…