firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMalicious command could be hidden in devtools output on Windows6.5 MediumfirefoxUbuntuArbitrary file read from GTK drag and drop on Linux6.5 MediumfirefoxUbuntuLogic bug in process allocation allowed to read arbitrary files6.5 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory...8.8 HighfirefoxUbuntuMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team...8.8 HighfirefoxUbuntuMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the...8.8 HighfirefoxUbuntuBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumfirefoxUbuntuBecause Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who...8.8 HighfirefoxUbuntuAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighfirefoxUbuntuMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighfirefoxUbuntuA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighfirefoxUbuntuAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighfirefoxUbuntuMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighfirefoxUbuntuUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumfirefoxUbuntuIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS...6.5 MediumfirefoxUbuntuIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumfirefoxUbuntuService Workers did not detect Private Browsing Mode correctly in all cases, which could have led...4.3 MediumfirefoxUbuntuKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumfirefoxUbuntuWhen downloading an HTML file, if the title of the page was formatted as a filename with a...7.8 HighfirefoxUbuntuUsing the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a...6.1 MediumfirefoxUbuntuWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighfirefoxUbuntuCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumfirefoxUbuntuWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumfirefoxUbuntuThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighfirefoxUbuntuThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumfirefoxUbuntuIf an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after...7.5 HighfirefoxUbuntuIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalfirefoxUbuntuFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumfirefoxUbuntuThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumfirefoxUbuntuService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumfirefoxUbuntufirefox vulnerabilitiesNo scorefirefoxUbuntuLogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 LowfirefoxUbuntuIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 HighfirefoxUbuntuMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxUbuntuIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumfirefoxUbuntuCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighfirefoxUbuntuA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighfirefoxUbuntuInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumfirefoxUbuntuAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 MediumfirefoxUbuntuMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighfirefoxUbuntuConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumfirefoxUbuntuDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumfirefoxUbuntuBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumfirefoxUbuntuWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumfirefoxUbuntulibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighfirefoxUbuntuMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighfirefoxUbuntuMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxUbuntuAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 Medium- Show moreLoading…