firefox vulnerabilities (Rocky Linux)
848 vulnerabilities.
firefoxRocky LinuxAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumfirefoxRocky Linux<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumfirefoxRocky LinuxWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighfirefoxRocky LinuxPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumfirefoxRocky LinuxIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalfirefoxRocky LinuxWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumfirefoxRocky LinuxAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighfirefoxRocky LinuxRegular expression denial of service in Rust's regex crate7.5 HighfirefoxRocky LinuxAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalfirefoxRocky LinuxRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighfirefoxRocky LinuxIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalfirefoxRocky Linuxxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalfirefoxRocky Linuxxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalfirefoxRocky LinuxMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxRocky LinuxWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighfirefoxRocky LinuxWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighfirefoxRocky LinuxWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumfirefoxRocky LinuxIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalfirefoxRocky LinuxIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighfirefoxRocky LinuxIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumfirefoxRocky LinuxMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighfirefoxRocky LinuxMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxRocky LinuxAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxRocky LinuxSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxRocky LinuxWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxRocky LinuxWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxRocky LinuxWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxRocky LinuxCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxRocky LinuxMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxRocky LinuxApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxRocky LinuxConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxRocky LinuxIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalfirefoxRocky LinuxMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...9.8 CriticalfirefoxRocky LinuxIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumfirefoxRocky LinuxUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumfirefoxRocky LinuxDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumfirefoxRocky LinuxUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumfirefoxRocky LinuxWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumfirefoxRocky LinuxFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighfirefoxRocky LinuxBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumfirefoxRocky LinuxAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighfirefoxRocky LinuxUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumfirefoxRocky LinuxA use-after-free could have occured when an HTTP2 session object was released on a different...8.8 HighfirefoxRocky LinuxMozilla developers and community members reported memory safety bugs present in Firefox 93 and...8.8 HighfirefoxRocky LinuxDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumfirefoxRocky LinuxBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumfirefoxRocky LinuxThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumfirefoxRocky LinuxThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumfirefoxRocky LinuxWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighfirefoxRocky LinuxThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Critical- Show moreLoading…