firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed Hatxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalfirefoxRed HatMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxRed HatWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighfirefoxRed HatWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighfirefoxRed HatWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumfirefoxRed HatIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalfirefoxRed HatIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighfirefoxRed HatIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumfirefoxRed HatMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighfirefoxRed HatMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxRed HatAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxRed HatSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxRed HatWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxRed HatWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxRed HatWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxRed HatCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxRed HatMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxRed HatApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxRed HatConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxRed HataddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxRed Hatbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxRed HatdefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxRed HatIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalfirefoxRed HatMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalfirefoxRed HatIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumfirefoxRed HatUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumfirefoxRed HatDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumfirefoxRed HatUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumfirefoxRed HatWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumfirefoxRed HatFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighfirefoxRed HatBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumfirefoxRed HatAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighfirefoxRed HatUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumfirefoxRed HatA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighfirefoxRed HatMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighfirefoxRed HatDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumfirefoxRed HatBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumfirefoxRed HatThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumfirefoxRed HatThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumfirefoxRed HatWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighfirefoxRed HatThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighfirefoxRed HatDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighfirefoxRed HatThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighfirefoxRed HatDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighfirefoxRed HatMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighfirefoxRed HatFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighfirefoxRed HatA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 High- Show moreLoading…