firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...8.8 HighfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalfirefoxUbuntuAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighfirefoxUbuntuIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...5.3 MediumfirefoxUbuntuThe internal WebBrowserPersist code does not use correct origin context for a resource being...6.5 MediumfirefoxUbuntuSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...7.5 HighfirefoxUbuntuWhen a new protocol handler is registered, the API accepts a title argument which can be used to...4.3 MediumfirefoxUbuntuBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...6.5 MediumfirefoxUbuntuA WebExtension can request access to local files without the warning prompt stating that the...7.1 HighfirefoxUbuntuA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 MediumfirefoxUbuntuBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 HighfirefoxUbuntuA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighfirefoxUbuntuWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...8.8 HighfirefoxUbuntuA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 CriticalfirefoxUbuntuA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 HighfirefoxUbuntuA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...6.5 MediumfirefoxUbuntuIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumfirefoxUbuntuA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...8.8 HighfirefoxUbuntuIncorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...9.8 CriticalfirefoxUbuntuA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalfirefoxUbuntuAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 HighfirefoxUbuntuIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...8.8 HighfirefoxUbuntuWebExtensions bundled with embedded experiments were not correctly checked for proper...9.8 CriticalfirefoxUbuntuIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 MediumfirefoxUbuntuAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumfirefoxUbuntuA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumfirefoxUbuntuNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighfirefoxUbuntuA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighfirefoxUbuntuAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighfirefoxUbuntuAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 HighfirefoxUbuntuA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighfirefoxUbuntuA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighfirefoxUbuntuService workers can use redirection to avoid the tainting of cross-origin resources in some...4.3 MediumfirefoxUbuntuA combination of an external SVG image referenced on a page and the coloring of anchor links...6.5 MediumfirefoxUbuntuA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 High- Show moreLoading…