firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuPDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...7.5 HighfirefoxUbuntuBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...10.0 HighfirefoxUbuntuThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...10.0 HighfirefoxUbuntuThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...10.0 HighfirefoxUbuntuThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...10.0 HighfirefoxUbuntuThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...9.3 HighfirefoxUbuntunsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...9.3 HighfirefoxUbuntuThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...10.0 HighfirefoxUbuntuUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...10.0 HighfirefoxUbuntuThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...10.0 HighfirefoxUbuntuMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...4.3 MediumfirefoxUbuntuThe WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the...4.3 MediumfirefoxUbuntuInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...6.8 MediumfirefoxUbuntuBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...7.5 HighfirefoxUbuntuRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...6.8 MediumfirefoxUbuntuUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...6.8 MediumfirefoxUbuntuThe asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths...7.5 HighfirefoxUbuntuMozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META...4.3 MediumfirefoxUbuntuHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...6.8 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...7.5 HighfirefoxUbuntuRace condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before...6.8 MediumfirefoxUbuntuThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...4.3 MediumfirefoxUbuntuMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not...5.0 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0,...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow...7.5 HighfirefoxUbuntuUse-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0,...5.1 MediumfirefoxUbuntuMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...4.3 MediumfirefoxUbuntuThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...6.4 MediumfirefoxUbuntuThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...5.0 MediumfirefoxUbuntuThe navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before...6.8 MediumfirefoxUbuntuThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...7.5 HighfirefoxUbuntuThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...7.5 HighfirefoxUbuntuThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...7.5 HighfirefoxUbuntuThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...7.5 HighfirefoxUbuntuMozilla Firefox before 37.0 relies on docshell type information instead of page principal...5.0 MediumfirefoxUbuntuMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow...7.5 HighfirefoxUbuntuMozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow...7.5 HighfirefoxUbuntuThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...6.8 MediumfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow...7.5 HighfirefoxUbuntuThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...4.3 MediumfirefoxUbuntuMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...5.0 MediumfirefoxUbuntuThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...5.0 MediumfirefoxUbuntuBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...6.8 MediumfirefoxUbuntuThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...6.8 MediumfirefoxUbuntuStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...4.3 MediumfirefoxUbuntuThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...5.0 MediumfirefoxUbuntuMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...7.5 High- Show moreLoading…