firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighfirefoxRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighfirefoxRed HatUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighfirefoxRed HatUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighfirefoxRed HatWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighfirefoxRed HatThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighfirefoxRed HatMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighfirefoxRed HatFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumfirefoxRed HatIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumfirefoxRed HatBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumfirefoxRed HatA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighfirefoxRed HatAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighfirefoxRed HatWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighfirefoxRed HatGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalfirefoxRed HatIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighfirefoxRed HatIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighfirefoxRed HatA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumfirefoxRed HatA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumfirefoxRed HatWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumfirefoxRed HatThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumfirefoxRed HatA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighfirefoxRed HatSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumfirefoxRed HatNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowfirefoxRed HatA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighfirefoxRed HatIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighfirefoxRed HatWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalfirefoxRed HatAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighfirefoxRed HatA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumfirefoxRed HatA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumfirefoxRed HatDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumfirefoxRed HatA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalfirefoxRed HatPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighfirefoxRed HatWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalfirefoxRed HatInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalfirefoxRed HatA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighfirefoxRed HatA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalfirefoxRed HatA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalfirefoxRed HatImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumfirefoxRed HatA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalfirefoxRed HatIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumfirefoxRed HatThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalfirefoxRed HatA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalfirefoxRed HatIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 High- Show moreLoading…