firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntufirefox regressionNo scorefirefoxUbuntuIf a text string that happens to be a filename in the operating system's native format is dragged...7.5 HighfirefoxUbuntuIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur during WebGL operations. While this results in a...7.5 HighfirefoxUbuntuA vulnerability exists in XSLT during number formatting where a negative buffer size may be...7.5 HighfirefoxUbuntuThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...6.1 MediumfirefoxUbuntuA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...6.1 MediumfirefoxUbuntuThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...5.3 MediumfirefoxUbuntuThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...4.3 MediumfirefoxUbuntuIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...6.5 MediumfirefoxUbuntuThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...4.3 MediumfirefoxUbuntuWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...7.5 HighfirefoxUbuntuContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...6.1 MediumfirefoxUbuntuIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 HighfirefoxUbuntuWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 HighfirefoxUbuntuIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 HighfirefoxUbuntuWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 MediumfirefoxUbuntuMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumfirefoxUbuntuAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalfirefoxUbuntuMalicious PDF can inject JavaScript into PDF Viewer8.8 HighfirefoxUbuntuSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 HighfirefoxUbuntuA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 CriticalfirefoxUbuntuThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 CriticalfirefoxUbuntuAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighfirefoxUbuntuURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...6.1 MediumfirefoxUbuntuIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...5.3 MediumfirefoxUbuntuA vulnerability in the notifications Push API where notifications can be sent through service...8.2 HighfirefoxUbuntuImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...5.3 MediumfirefoxUbuntuA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...7.5 HighfirefoxUbuntuA shared worker created from a "data:" URL in one tab can be shared by another tab with a...7.5 HighfirefoxUbuntuWebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs...7.5 HighfirefoxUbuntuWebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content...7.5 HighfirefoxUbuntuIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...6.5 MediumfirefoxUbuntuThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...6.5 MediumfirefoxUbuntuUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 MediumfirefoxUbuntuWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 HighfirefoxUbuntuA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighfirefoxUbuntuA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...9.8 CriticalfirefoxUbuntuA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighfirefoxUbuntuMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuUnsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code...6.1 MediumfirefoxUbuntuA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...9.8 CriticalfirefoxUbuntuThe reader view will display cross-origin content when CORS headers are set to prohibit the...5.3 Medium- Show moreLoading…