firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
-
firefoxUbuntu Memory safety bugs fixed in Firefox 136 and Thunderbird 136 8.2 High -
firefoxUbuntu Disclosure of uninitialized memory when .toUpperCase() causes string to get longer 9.8 Critical -
firefoxUbuntu Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 6.5 Medium -
firefoxUbuntu Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 7.5 High -
firefoxUbuntu Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents 7.3 High -
firefoxUbuntu Clickjacking the registerProtocolHandler info-bar 4.3 Medium -
firefoxUbuntu Unexpected GC during RegExp bailout processing 6.5 Medium -
firefoxUbuntu JIT corruption of WASM i32 return values on 64-bit CPUs 7.6 High -
firefoxUbuntu Inconsistent comparator in XSLT sorting led to out-of-bounds access 8.1 High -
firefoxUbuntu Use-after-free in WebTransportChild 7.5 High -
firefoxUbuntu Memory safety bugs fixed in Firefox 135.0.1 6.5 Medium -
firefoxUbuntu Memory safety bugs fixed in Firefox 135 and Thunderbird 135 9.8 Critical -
firefoxUbuntu Fullscreen notification not properly displayed 4.3 Medium -
firefoxUbuntu Fullscreen notification is not displayed when fullscreen is re-requested 5.3 Medium -
firefoxUbuntu Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 9.8 Critical -
firefoxUbuntu Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 9.8 Critical -
firefoxUbuntu Certificate length was not properly checked 8.8 High -
firefoxUbuntu Potential opening of private browsing tabs in normal browsing windows 6.5 Medium -
firefoxUbuntu Use-after-free during concurrent delazification 7.5 High -
firefoxUbuntu A bug in WebAssembly code generation could result in a crash 8.8 High -
firefoxUbuntu Use-after-free in Custom Highlight 8.8 High -
firefoxUbuntu Use-after-free in XSLT 9.8 Critical -
firefoxUbuntu Memory safety bugs fixed in Firefox 134 and Thunderbird 134 9.8 Critical -
firefoxUbuntu Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 5.1 Medium -
firefoxUbuntu Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 6.5 Medium -
firefoxUbuntu Memory corruption when using JavaScript Text Segmentation 7.7 High -
firefoxUbuntu Compartment mismatch when parsing JavaScript JSON module 4.0 Medium -
firefoxUbuntu Alt-Svc ALPN validation failure when redirected 4.0 Medium -
firefoxUbuntu Use-after-free when breaking lines in text 5.3 Medium -
firefoxUbuntu WebChannel APIs susceptible to confused deputy attack 5.4 Medium -
firefoxUbuntu Missing thread synchronization primitives could have led to a data race on members of the... 6.5 Medium -
firefoxUbuntu Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of... 8.8 High -
firefoxUbuntu A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the... 6.5 Medium -
firefoxUbuntu `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was... 9.1 Critical -
firefoxUbuntu A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an... 9.8 Critical -
firefoxUbuntu When handling keypress events, an attacker may have been able to trick a user into bypassing the ... 8.8 High -
firefoxUbuntu The application failed to account for exceptions thrown by the `loadManifestFromFile` method... 5.4 Medium -
firefoxUbuntu A crafted URL containing Arabic script and whitespace characters could have hidden the true... 5.4 Medium -
firefoxUbuntu Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`... 6.1 Medium -
firefoxUbuntu The incorrect domain may have been displayed in the address bar during an interrupted navigation... 4.3 Medium -
firefoxUbuntu An attacker could cause a select dropdown to be shown over another tab; this could have led to... 4.3 Medium -
firefoxUbuntu A malicious website could have included an iframe with an malformed URI resulting in a non... 6.5 Medium -
firefoxUbuntu Potential race conditions in IndexedDB could have caused memory corruption, leading to a... 5.3 Medium -
firefoxUbuntu Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of... 8.8 High -
firefoxUbuntu By sending a specially crafted push message, a remote server could have hung the parent process,... 7.5 High -
firefoxUbuntu A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This... 6.5 Medium -
firefoxUbuntu Repeated writes to history interface attributes could have been used to cause a Denial of Service... 6.5 Medium -
firefoxUbuntu Video frames could have been leaked between origins in some situations. This vulnerability... 6.5 Medium -
firefoxUbuntu Truncation of a long URL could have allowed origin spoofing in a permission prompt. This... 6.5 Medium -
firefoxUbuntu In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header... 6.1 Medium - Show olderLoading…