firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...5.3 MediumfirefoxUbuntuIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumfirefoxUbuntuWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...9.8 CriticalfirefoxUbuntuIf an HTTP authentication prompt is triggered by a background network request from a page or...7.5 HighfirefoxUbuntuIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...5.3 MediumfirefoxUbuntuThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...7.5 HighfirefoxUbuntuDevelopment Tools panels of an extension are required to load URLs for the panels as relative...7.5 HighfirefoxUbuntuWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...6.5 MediumfirefoxUbuntuAn audio capture session can started under an incorrect origin from the site making the capture...5.3 MediumfirefoxUbuntuA Blob URL can violate origin attribute segregation, allowing it to be accessed from a private...4.3 MediumfirefoxUbuntuThe printing process can bypass local access protections to read files available through symlinks...5.3 MediumfirefoxUbuntuStyle editor traffic in the Developer Tools can be routed through a service worker hosted on a...5.3 MediumfirefoxUbuntuWebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file....7.8 HighfirefoxUbuntuA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when manipulating floating "first-letter" style elements...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable"...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalfirefoxUbuntuAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalfirefoxUbuntuA heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called...7.5 HighfirefoxUbuntuA heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing,...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalfirefoxUbuntuCVE-2017-5754 does not affect BellSoft software5.6 MediumfirefoxUbuntuCVE-2017-5753 does not affect BellSoft software5.6 MediumfirefoxUbuntuImportant: kernel security, bug fix, and enhancement update5.6 MediumfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionNo scorefirefoxUbuntuIf a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests...5.3 MediumfirefoxUbuntuJavaScript can be injected into an exported bookmarks file by placing JavaScript code into user...6.1 MediumfirefoxUbuntuControl characters prepended before "javascript:" URLs pasted in the addressbar can cause the...6.1 MediumfirefoxUbuntuPunycode format text will be displayed for entire qualified international domain names in some...5.3 MediumfirefoxUbuntuSVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that...5.3 MediumfirefoxUbuntuMixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not...7.3 HighfirefoxUbuntuA "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the...6.1 MediumfirefoxUbuntuSome Arabic and Indic vowel marker characters can be combined with Latin characters in a domain...5.3 MediumfirefoxUbuntuThe combined, single character, version of the letter 'i' with any of the potential accents in...5.3 MediumfirefoxUbuntuA vulnerability where the security wrapper does not deny access to some exposed properties using...5.3 MediumfirefoxUbuntuThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumfirefoxUbuntuA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalfirefoxUbuntuTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Medium- Show moreLoading…