firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighfirefoxRed HatInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighfirefoxRed HatUse-after-free in WebTransportChild7.5 HighfirefoxRed HatAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighfirefoxRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalfirefoxRed HatMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalfirefoxRed HatCertificate length was not properly checked8.8 HighfirefoxRed HatPotential opening of private browsing tabs in normal browsing windows6.5 MediumfirefoxRed HatUse-after-free during concurrent delazification7.5 HighfirefoxRed HatA bug in WebAssembly code generation could result in a crash8.8 HighfirefoxRed HatUse-after-free in Custom Highlight8.8 HighfirefoxRed HatUse-after-free in XSLT9.8 CriticalfirefoxRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumfirefoxRed HatMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumfirefoxRed HatMemory corruption when using JavaScript Text Segmentation7.7 HighfirefoxRed HatCompartment mismatch when parsing JavaScript JSON module4.0 MediumfirefoxRed HatAlt-Svc ALPN validation failure when redirected4.0 MediumfirefoxRed HatUse-after-free when breaking lines in text5.3 MediumfirefoxRed HatWebChannel APIs susceptible to confused deputy attack5.4 MediumfirefoxRed Hatidna accepts Punycode labels that do not produce any non-ASCII when decoded5.1 MediumfirefoxRed HatMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighfirefoxRed HatWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighfirefoxRed HatThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumfirefoxRed HatA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumfirefoxRed HatEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumfirefoxRed HatAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumfirefoxRed HatMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighfirefoxRed HatBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighfirefoxRed HatA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumfirefoxRed HatRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumfirefoxRed HatVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumfirefoxRed HatTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumfirefoxRed HatIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumfirefoxRed HatThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumfirefoxRed HatAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighfirefoxRed HatA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighfirefoxRed HatAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalfirefoxRed HatMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighfirefoxRed HatMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalfirefoxRed HatMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalfirefoxRed HatA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighfirefoxRed HatA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighfirefoxRed HatBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumfirefoxRed HatA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumfirefoxRed HatIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighfirefoxRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighfirefoxRed HatAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighfirefoxRed HatA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalfirefoxRed HatAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 HighfirefoxRed HatMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Critical- Show moreLoading…