firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalfirefoxRed HatA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighfirefoxRed HatSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumfirefoxRed HatAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalfirefoxRed HatMalicious PDF can inject JavaScript into PDF Viewer8.8 HighfirefoxRed HatSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 HighfirefoxRed HatA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 CriticalfirefoxRed HatAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighfirefoxRed HatMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 CriticalfirefoxRed HatAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 HighfirefoxRed HatUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 MediumfirefoxRed HatWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 HighfirefoxRed HatA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighfirefoxRed HatA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighfirefoxRed HatMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighfirefoxRed HatA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 CriticalfirefoxRed HatIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumfirefoxRed HatA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalfirefoxRed HatAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalfirefoxRed HatWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 HighfirefoxRed HatThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumfirefoxRed HatA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalfirefoxRed HatMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalfirefoxRed HatTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumfirefoxRed HatA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalfirefoxRed HatThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumfirefoxRed HatA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalfirefoxRed HatFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighfirefoxRed HatMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 CriticalfirefoxRed HatA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighfirefoxRed HatWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighfirefoxRed HatA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalfirefoxRed HatThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighfirefoxRed HatA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalfirefoxRed HatOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 Medium- Show moreLoading…