firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighfirefoxRed HatCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumfirefoxRed HatA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalfirefoxRed HatA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalfirefoxRed HatA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumfirefoxRed HatThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalfirefoxRed HatThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalfirefoxRed HatLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 MediumfirefoxRed HatIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumfirefoxRed Hatpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumfirefoxRed HatWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumfirefoxRed HatAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalfirefoxRed HatCross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumfirefoxRed HatA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalfirefoxRed HatA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumfirefoxRed HatA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalfirefoxRed HatAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighfirefoxRed HatIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighfirefoxRed HatA WebExtension can request access to local files without the warning prompt stating that the...7.1 HighfirefoxRed HatA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 MediumfirefoxRed HatBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 HighfirefoxRed HatA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighfirefoxRed HatWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighfirefoxRed HatA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 CriticalfirefoxRed HatA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 HighfirefoxRed HatWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighfirefoxRed HatA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighfirefoxRed HatA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...6.5 MediumfirefoxRed HatIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumfirefoxRed HatA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalfirefoxRed HatMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalfirefoxRed HatMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalfirefoxRed HatA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalfirefoxRed HatAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumfirefoxRed HatA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumfirefoxRed HatNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighfirefoxRed HatA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighfirefoxRed HatAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighfirefoxRed HatA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighfirefoxRed HatA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighfirefoxRed HatA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 High- Show moreLoading…