firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 CriticalfirefoxUbuntuA non-existent chrome.manifest file will attempt to be loaded during startup from the primary...5.5 MediumfirefoxUbuntuOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...5.3 MediumfirefoxUbuntuIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...7.5 HighfirefoxUbuntuA malicious site could spoof the contents of the print preview window if popup windows are...7.5 HighfirefoxUbuntuA "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL...6.5 MediumfirefoxUbuntuIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 HighfirefoxUbuntuAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 MediumfirefoxUbuntuWhen dragging content from the primary browser pane to the addressbar on a malicious site, it is...5.3 MediumfirefoxUbuntuIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 HighfirefoxUbuntuAn attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:"...5.3 MediumfirefoxUbuntuThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 MediumfirefoxUbuntuA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 CriticalfirefoxUbuntuA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 HighfirefoxUbuntuMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticalfirefoxUbuntuVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumfirefoxUbuntuUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumfirefoxUbuntuA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 HighfirefoxUbuntuCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumfirefoxUbuntuA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalfirefoxUbuntuWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 CriticalfirefoxUbuntuA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalfirefoxUbuntuA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalfirefoxUbuntuJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalfirefoxUbuntuThe "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla...6.1 MediumfirefoxUbuntuSpecial "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages...9.8 CriticalfirefoxUbuntuThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalfirefoxUbuntuWebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the...6.1 MediumfirefoxUbuntuA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 HighfirefoxUbuntuThe existence of a specifically requested local file can be found due to the double firing of the...3.3 LowfirefoxUbuntuWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 HighfirefoxUbuntuData sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will...7.5 HighfirefoxUbuntuProxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with...5.9 MediumfirefoxUbuntuURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumfirefoxUbuntuFeed preview for RSS feeds can be used to capture errors and exceptions generated by privileged...7.5 HighfirefoxUbuntuThe "export" function in the Certificate Viewer can force local filesystem navigation when the ...7.5 HighfirefoxUbuntuA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalfirefoxUbuntuUse-after-free vulnerability in Web Animations when interacting with cycle collection found...7.5 HighfirefoxUbuntuHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighfirefoxUbuntuA memory corruption vulnerability in Skia that can occur when using transforms to make gradients,...9.8 CriticalfirefoxUbuntuUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalfirefoxUbuntuJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory...9.8 Critical- Show moreLoading…