firefox vulnerabilities (Rocky Linux)
848 vulnerabilities.
firefoxRocky LinuxMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighfirefoxRocky LinuxUninitialized memory in the JavaScript Engine component6.5 MediumfirefoxRocky LinuxSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighfirefoxRocky LinuxSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalfirefoxRocky LinuxMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxRocky LinuxMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxRocky LinuxIncorrect JavaScript state machine for generators6.5 MediumfirefoxRocky LinuxXSLT documents could bypass CSP8.1 HighfirefoxRocky LinuxIncorrect URL stripping in CSP reports9.8 CriticalfirefoxRocky LinuxPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxRocky Linuxjavascript: URLs executed on object and embed tags8.1 HighfirefoxRocky LinuxLarge branch table could lead to truncated instruction9.8 CriticalfirefoxRocky LinuxJavaScript engine only wrote partial return value to stack6.5 MediumfirefoxRocky LinuxContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumfirefoxRocky LinuxIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumfirefoxRocky LinuxThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumfirefoxRocky LinuxUse-after-free in FontFaceSet9.8 CriticalfirefoxRocky LinuxUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumfirefoxRocky LinuxMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighfirefoxRocky LinuxMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighfirefoxRocky LinuxClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumfirefoxRocky LinuxScript element events leaked cross-origin resource status4.3 MediumfirefoxRocky LinuxPotential local code execution in “Copy as cURL” command4.8 MediumfirefoxRocky LinuxError handling for script execution was incorrectly isolated from web content4.3 MediumfirefoxRocky LinuxOut-of-bounds access when optimizing linear sums8.8 HighfirefoxRocky LinuxOut-of-bounds access when resolving Promise objects9.8 CriticalfirefoxRocky LinuxMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighfirefoxRocky LinuxMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighfirefoxRocky LinuxUnsafe attribute access during XPath parsing4.8 MediumfirefoxRocky LinuxProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalfirefoxRocky LinuxPrivilege escalation in Thunderbird Updater8.8 HighfirefoxRocky LinuxMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighfirefoxRocky LinuxURL Bar Spoofing via non-BMP Unicode characters7.3 HighfirefoxRocky LinuxUse-after-free triggered by XSLTProcessor6.5 MediumfirefoxRocky LinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumfirefoxRocky LinuxMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighfirefoxRocky LinuxAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighfirefoxRocky LinuxClickjacking the registerProtocolHandler info-bar4.3 MediumfirefoxRocky LinuxUnexpected GC during RegExp bailout processing6.5 MediumfirefoxRocky LinuxJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighfirefoxRocky LinuxInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighfirefoxRocky LinuxUse-after-free in WebTransportChild7.5 HighfirefoxRocky LinuxAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighfirefoxRocky LinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalfirefoxRocky LinuxMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalfirefoxRocky LinuxCertificate length was not properly checked8.8 HighfirefoxRocky LinuxPotential opening of private browsing tabs in normal browsing windows6.5 MediumfirefoxRocky LinuxUse-after-free during concurrent delazification7.5 HighfirefoxRocky LinuxA bug in WebAssembly code generation could result in a crash8.8 HighfirefoxRocky LinuxUse-after-free in Custom Highlight8.8 High- Show moreLoading…