firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntufirefox regressionNo scorefirefoxUbuntuWhen the pointer lock is enabled by a website though requestPointerLock(), no user notification...4.3 MediumfirefoxUbuntuGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalfirefoxUbuntuIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighfirefoxUbuntuIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighfirefoxUbuntuA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumfirefoxUbuntuA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumfirefoxUbuntuWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumfirefoxUbuntuThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumfirefoxUbuntuA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighfirefoxUbuntuSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumfirefoxUbuntuNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowfirefoxUbuntuA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumfirefoxUbuntuA compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS)...6.1 MediumfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighfirefoxUbuntuIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumfirefoxUbuntuIf a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any...5.3 MediumfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68. Some...9.8 CriticalfirefoxUbuntuWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalfirefoxUbuntuOut of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.1 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighfirefoxUbuntuA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumfirefoxUbuntuEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighfirefoxUbuntuThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumfirefoxUbuntuA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumfirefoxUbuntuWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumfirefoxUbuntuApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumfirefoxUbuntuA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighfirefoxUbuntuThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumfirefoxUbuntuSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumfirefoxUbuntuWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighfirefoxUbuntuActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumfirefoxUbuntuA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumfirefoxUbuntuUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighfirefoxUbuntuDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumfirefoxUbuntuNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalfirefoxUbuntuA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalfirefoxUbuntuPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighfirefoxUbuntuWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalfirefoxUbuntuInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalfirefoxUbuntuA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighfirefoxUbuntufirefox regressionNo scorefirefoxUbuntufirefox regressionNo scorefirefoxUbuntuA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 HighfirefoxUbuntuA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalfirefoxUbuntuA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Critical- Show moreLoading…