firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuThe protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct...6.1 MediumfirefoxUbuntuBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...8.8 HighfirefoxUbuntuInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...6.5 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow...10.0 CriticalfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...9.8 CriticalfirefoxUbuntuMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 MediumfirefoxUbuntuThe WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges,...4.0 MediumfirefoxUbuntuInteger underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla...6.8 MediumfirefoxUbuntuBuffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla...10.0 HighfirefoxUbuntuBuffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43...10.0 HighfirefoxUbuntuThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...5.0 MediumfirefoxUbuntuThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...5.0 MediumfirefoxUbuntuThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...4.3 MediumfirefoxUbuntuThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...6.8 MediumfirefoxUbuntuThe importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0...5.0 MediumfirefoxUbuntuMozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the...5.0 MediumfirefoxUbuntuInteger overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in...6.8 MediumfirefoxUbuntuInteger overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in...7.5 HighfirefoxUbuntuMozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows...5.0 MediumfirefoxUbuntuUse-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5...7.5 HighfirefoxUbuntuMozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows...5.0 MediumfirefoxUbuntuMozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing...5.0 MediumfirefoxUbuntuInteger underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0...10.0 HighfirefoxUbuntuMozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which...6.8 MediumfirefoxUbuntuBuffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes...10.0 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow...10.0 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and...10.0 HighfirefoxUbuntuThe CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before...7.5 HighfirefoxUbuntuThe (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla...7.5 HighfirefoxUbuntuBuffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42...7.5 HighfirefoxUbuntuMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a...5.0 MediumfirefoxUbuntuMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,...6.8 MediumfirefoxUbuntuThe URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped...5.0 MediumfirefoxUbuntuBuffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows...7.5 HighfirefoxUbuntuMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...7.5 HighfirefoxUbuntuRace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...6.8 MediumfirefoxUbuntuMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...7.5 HighfirefoxUbuntuThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...4.3 MediumfirefoxUbuntuInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...7.5 HighfirefoxUbuntuHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...9.8 CriticalfirefoxUbuntuThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...7.5 HighfirefoxUbuntuThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...4.3 MediumfirefoxUbuntuMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...4.3 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...7.5 HighfirefoxUbuntuThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...6.8 MediumfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...6.8 MediumfirefoxUbuntuThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 HighfirefoxUbuntuThe InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might...7.5 High- Show moreLoading…