firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighfirefoxRed HatWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighfirefoxRed HatBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumfirefoxRed HatFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighfirefoxRed HatWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 HighfirefoxRed HatBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumfirefoxRed HatUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 MediumfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighfirefoxRed HatThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumfirefoxRed HatJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighfirefoxRed HatWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumfirefoxRed HatAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumfirefoxRed HatBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumfirefoxRed HatInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumfirefoxRed HatDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumfirefoxRed HatWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumfirefoxRed HatIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighfirefoxRed HatWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumfirefoxRed HatWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighfirefoxRed HatWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighfirefoxRed HatManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumfirefoxRed HatDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighfirefoxRed HatMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighfirefoxRed HatWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumfirefoxRed HatUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighfirefoxRed HatIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 CriticalfirefoxRed HatA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalfirefoxRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumfirefoxRed HatA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighfirefoxRed HatMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalfirefoxRed HatOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighfirefoxRed HatWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighfirefoxRed HatUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighfirefoxRed HatUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalfirefoxRed HatThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumfirefoxRed HatThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighfirefoxRed HatWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighfirefoxRed HatBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighfirefoxRed HatWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighfirefoxRed Hatusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighfirefoxRed HatIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumfirefoxRed HatA content process could have modified shared memory relating to crash reporting information,...8.8 HighfirefoxRed HatIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighfirefoxRed HatWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Medium- Show moreLoading…