firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalfirefoxUbuntuThe search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a...7.5 HighfirefoxUbuntuStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 HighfirefoxUbuntuThe name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have...9.8 CriticalfirefoxUbuntuAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighfirefoxUbuntuMozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an...6.1 MediumfirefoxUbuntuThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 HighfirefoxUbuntuHTML tags received from the Pocket server will be processed without sanitization and any...9.8 CriticalfirefoxUbuntuExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighfirefoxUbuntuUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalfirefoxUbuntuUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalfirefoxUbuntuMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighfirefoxUbuntuUse-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not...8.1 HighfirefoxUbuntuEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumfirefoxUbuntuA buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later...7.5 HighfirefoxUbuntuMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighfirefoxUbuntuRedirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the ...8.8 HighfirefoxUbuntuWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 HighfirefoxUbuntuCanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 HighfirefoxUbuntuAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 MediumfirefoxUbuntuAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 CriticalfirefoxUbuntuContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 MediumfirefoxUbuntuA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 HighfirefoxUbuntuA use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially...7.8 HighfirefoxUbuntuA use-after-free during web animations when working with timelines resulting in a potentially...7.5 HighfirefoxUbuntuTwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 MediumfirefoxUbuntuAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 CriticalfirefoxUbuntuDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 MediumfirefoxUbuntuMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighfirefoxUbuntuAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 MediumfirefoxUbuntuAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalfirefoxUbuntuA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighfirefoxUbuntuA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumfirefoxUbuntuMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalfirefoxUbuntuWeb content could access information in the HTTP cache if e10s is disabled. This can reveal some...5.9 MediumfirefoxUbuntuA potentially exploitable use-after-free crash during actor destruction with service workers....9.8 CriticalfirefoxUbuntuMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 HighfirefoxUbuntuMozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a...8.8 HighfirefoxUbuntuMozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which...6.5 MediumfirefoxUbuntuUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 CriticalfirefoxUbuntuUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 CriticalfirefoxUbuntuMozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full...4.3 MediumfirefoxUbuntuHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 HighfirefoxUbuntuUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 CriticalfirefoxUbuntuUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 CriticalfirefoxUbuntuBuffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in...8.8 HighfirefoxUbuntuUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 Critical- Show moreLoading…