firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuThe mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility...8.8 HighfirefoxUbuntuThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 HighfirefoxUbuntuThe PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote...6.5 MediumfirefoxUbuntuHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 CriticalfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 CriticalfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...9.8 CriticalfirefoxUbuntuThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...6.5 MediumfirefoxUbuntuMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...4.3 MediumfirefoxUbuntuMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...8.1 HighfirefoxUbuntuMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumfirefoxUbuntuUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighfirefoxUbuntuThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighfirefoxUbuntuMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 MediumfirefoxUbuntuInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 HighfirefoxUbuntuMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...6.5 MediumfirefoxUbuntuUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 HighfirefoxUbuntuUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 HighfirefoxUbuntuUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...8.8 HighfirefoxUbuntuUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 CriticalfirefoxUbuntuStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 HighfirefoxUbuntuMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...4.3 MediumfirefoxUbuntuMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 MediumfirefoxUbuntuMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 MediumfirefoxUbuntuHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 HighfirefoxUbuntuHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...8.8 HighfirefoxUbuntuMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 MediumfirefoxUbuntuMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...8.8 HighfirefoxUbuntuMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...6.1 MediumfirefoxUbuntuMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...4.3 MediumfirefoxUbuntuMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 HighfirefoxUbuntuMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...6.5 MediumfirefoxUbuntuUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 HighfirefoxUbuntuMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...6.5 MediumfirefoxUbuntuMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 MediumfirefoxUbuntuUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 HighfirefoxUbuntuHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 HighfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...9.8 CriticalfirefoxUbuntuThe Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0...4.3 MediumfirefoxUbuntuThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...5.4 MediumfirefoxUbuntuMozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP)...6.5 MediumfirefoxUbuntuHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 HighfirefoxUbuntuRace condition in the get implementation in the ServiceWorkerManager class in the Service Worker...7.5 HighfirefoxUbuntuUse-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in...8.8 HighfirefoxUbuntuThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 High- Show moreLoading…