firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatCross-process information leaked due to malicious IPC messages9.8 CriticalfirefoxRed HatOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalfirefoxRed HatUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalfirefoxRed HatMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighfirefoxRed HatInformation disclosure in the Networking: Cache component6.2 MediumfirefoxRed HatInteger overflow in the SVG component8.8 HighfirefoxRed HatIncorrect boundary conditions in the JavaScript: GC component6.5 MediumfirefoxRed HatSame-origin policy bypass in the Layout component6.5 MediumfirefoxRed HatSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighfirefoxRed HatSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighfirefoxRed HatDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighfirefoxRed HatMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighfirefoxRed HatUninitialized memory in the JavaScript Engine component6.5 MediumfirefoxRed HatSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighfirefoxRed HatSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalfirefoxRed HatMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxRed HatMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxRed HatIncorrect JavaScript state machine for generators6.5 MediumfirefoxRed HatXSLT documents could bypass CSP8.1 HighfirefoxRed HatIncorrect URL stripping in CSP reports9.8 CriticalfirefoxRed HatPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxRed Hatjavascript: URLs executed on object and embed tags8.1 HighfirefoxRed HatLarge branch table could lead to truncated instruction9.8 CriticalfirefoxRed HatJavaScript engine only wrote partial return value to stack6.5 MediumfirefoxRed HatContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumfirefoxRed HatIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumfirefoxRed HatThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumfirefoxRed HatUse-after-free in FontFaceSet9.8 CriticalfirefoxRed HatUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumfirefoxRed HatMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighfirefoxRed HatMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighfirefoxRed HatClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumfirefoxRed HatScript element events leaked cross-origin resource status4.3 MediumfirefoxRed HatPotential local code execution in “Copy as cURL” command4.8 MediumfirefoxRed HatError handling for script execution was incorrectly isolated from web content4.3 MediumfirefoxRed HatOut-of-bounds access when optimizing linear sums8.8 HighfirefoxRed HatOut-of-bounds access when resolving Promise objects9.8 CriticalfirefoxRed HatMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighfirefoxRed HatMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighfirefoxRed HatUnsafe attribute access during XPath parsing4.8 MediumfirefoxRed HatProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalfirefoxRed HatPrivilege escalation in Thunderbird Updater8.8 HighfirefoxRed HatMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighfirefoxRed HatURL Bar Spoofing via non-BMP Unicode characters7.3 HighfirefoxRed HatUse-after-free triggered by XSLTProcessor6.5 MediumfirefoxRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumfirefoxRed HatMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighfirefoxRed HatAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighfirefoxRed HatClickjacking the registerProtocolHandler info-bar4.3 MediumfirefoxRed HatUnexpected GC during RegExp bailout processing6.5 Medium- Show moreLoading…