firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMozilla developers Randell Jesup, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team...8.8 HighfirefoxUbuntuUnder certain circumstances, a call to the <code>bind</code> function may have resulted in the...6.5 MediumfirefoxUbuntuWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain...6.5 MediumfirefoxUbuntuIf multiple instances of resource exhaustion occurred at the incorrect time, the garbage...6.5 MediumfirefoxUbuntuAn attacker could have caused memory corruption and a potentially exploitable use-after-free of a...8.8 HighfirefoxUbuntuUsing a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to...6.1 MediumfirefoxUbuntuUnder specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI...4.3 MediumfirefoxUbuntuMultiple race conditions in the font initialization could have led to memory corruption and...7.5 HighfirefoxUbuntuMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighfirefoxUbuntuA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumfirefoxUbuntuFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighfirefoxUbuntuWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighfirefoxUbuntuAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighfirefoxUbuntuFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumfirefoxUbuntuA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and...8.8 HighfirefoxUbuntuMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighfirefoxUbuntuDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumfirefoxUbuntuWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighfirefoxUbuntuIf temporary "one-time" permissions, such as the ability to use the Camera, were granted to a...8.8 HighfirefoxUbuntuWhen following a redirect to a publicly accessible web extension file, the URL may have been...6.5 MediumfirefoxUbuntuWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumfirefoxUbuntuSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumfirefoxUbuntuUnder certain circumstances, a ServiceWorker's offline cache may have leaked to the file system...4.3 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMozilla developers Timothy Nikkel, Gabriele Svelto, Jeff Muizelaar and the Mozilla Fuzzing Team...8.8 HighfirefoxUbuntuMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxUbuntuWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumfirefoxUbuntuWhen dragging and dropping an image cross-origin, the image's size could potentially be leaked....6.5 MediumfirefoxUbuntuModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighfirefoxUbuntuAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighfirefoxUbuntuAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior....9.8 CriticalfirefoxUbuntuCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighfirefoxUbuntuThe return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have...7.5 HighfirefoxUbuntuWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighfirefoxUbuntuDue to URL previews in the network panel of developer tools improperly storing URLs, query...8.8 HighfirefoxUbuntuA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumfirefoxUbuntuPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighfirefoxUbuntuThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumfirefoxUbuntuAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs fixed in Firefox 1098.8 HighfirefoxUbuntuMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighfirefoxUbuntuCreation of duplicate SystemPrincipal from less secure contexts6.5 MediumfirefoxUbuntuCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumfirefoxUbuntuContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumfirefoxUbuntuURL being dragged from cross-origin iframe into same tab triggers navigation6.5 Medium- Show moreLoading…