firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumfirefoxUbuntuUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 MediumfirefoxUbuntuWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 MediumfirefoxUbuntuDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 MediumfirefoxUbuntuWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 MediumfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighfirefoxUbuntuThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumfirefoxUbuntuJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighfirefoxUbuntuA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumfirefoxUbuntuWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumfirefoxUbuntuAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumfirefoxUbuntuBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumfirefoxUbuntuInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumfirefoxUbuntufirefox vulnerabilityNo scorefirefoxUbuntuBy navigating a tab using the history API, an attacker could cause the address bar to display the...4.3 MediumfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighfirefoxUbuntuDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumfirefoxUbuntuWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumfirefoxUbuntuIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighfirefoxUbuntuWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumfirefoxUbuntuWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighfirefoxUbuntuWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighfirefoxUbuntuManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumfirefoxUbuntuDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighfirefoxUbuntuA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighfirefoxUbuntuWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumfirefoxUbuntuUndefined Behavior in bounded Crossbeam channel8.1 HighfirefoxUbuntuMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighfirefoxUbuntuMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 HighfirefoxUbuntuWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 HighfirefoxUbuntuWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 MediumfirefoxUbuntuMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 MediumfirefoxUbuntuMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighfirefoxUbuntuWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumfirefoxUbuntuNSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumfirefoxUbuntuUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 CriticalfirefoxUbuntuA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 LowfirefoxUbuntuDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 HighfirefoxUbuntuIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 CriticalfirefoxUbuntuA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalfirefoxUbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalfirefoxUbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumfirefoxUbuntuA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighfirefoxUbuntuMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 CriticalfirefoxUbuntuMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalfirefoxUbuntuInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 LowfirefoxUbuntuA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 CriticalfirefoxUbuntuOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 High- Show moreLoading…