firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntufirefox regressionNo scorefirefoxUbuntuThe AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length...5.3 MediumfirefoxUbuntuA vulnerability where WebExtensions can download and attempt to open a file of some non...9.8 CriticalfirefoxUbuntuThe "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from...5.3 MediumfirefoxUbuntuWebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL,...5.3 MediumfirefoxUbuntuOn pages containing an iframe, the "data:" protocol can be used to create a modal dialog through...5.3 MediumfirefoxUbuntuInside the JavaScript parser, a cast of an integer to a narrower type can result in data read...8.2 HighfirefoxUbuntuIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...5.3 MediumfirefoxUbuntuMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalfirefoxUbuntuThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumfirefoxUbuntuA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalfirefoxUbuntuFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighfirefoxUbuntuMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalfirefoxUbuntuDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 CriticalfirefoxUbuntuA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...5.3 MediumfirefoxUbuntuA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighfirefoxUbuntuA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...7.5 HighfirefoxUbuntuWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalfirefoxUbuntuJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....6.1 MediumfirefoxUbuntuThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighfirefoxUbuntuResponse header name interning does not have same-origin protections and these headers are stored...7.5 HighfirefoxUbuntuOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...7.8 HighfirefoxUbuntuA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalfirefoxUbuntuOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumfirefoxUbuntuWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...9.8 CriticalfirefoxUbuntuSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 HighfirefoxUbuntuA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 CriticalfirefoxUbuntuA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when reading an image observer during frame...9.8 CriticalfirefoxUbuntuIf a long user name is used in a username/password combination in a site URL (such as " http:/...7.5 HighfirefoxUbuntuAn error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine...5.9 MediumfirefoxUbuntuMemory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 CriticalfirefoxUbuntuAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...9.1 CriticalfirefoxUbuntuIf a server sends two Strict-Transport-Security (STS) headers for a single connection, they will...5.3 MediumfirefoxUbuntuA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...9.8 CriticalfirefoxUbuntuUse of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:...8.8 HighfirefoxUbuntuHeap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:...8.1 HighfirefoxUbuntuUpdated firefox packages fix security vulnerabilities9.8 CriticalfirefoxUbuntuOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...9.1 CriticalfirefoxUbuntuHeap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src...8.8 HighfirefoxUbuntuHeap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.8.8 High- Show moreLoading…