firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMemory corruption in IPC FilePickerShownCallback6.5 MediumfirefoxUbuntuMemory corruption in IPC ColorPickerShownCallback6.5 MediumfirefoxUbuntuMemory corruption in IPC CanvasTranslator6.5 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalfirefoxUbuntuWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighfirefoxUbuntuFull screen notification obscured by external program6.5 MediumfirefoxUbuntuFull screen notification obscured by file open dialog7.5 HighfirefoxUbuntuIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighfirefoxUbuntuRace conditions in reference counting code were found through code inspection. These could have...5.9 MediumfirefoxUbuntuAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighfirefoxUbuntuA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighfirefoxUbuntuIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumfirefoxUbuntuOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumfirefoxUbuntuUse-after-free in workers8.8 HighfirefoxUbuntuMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 HighfirefoxUbuntuA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 MediumfirefoxUbuntuA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 HighfirefoxUbuntuUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 MediumfirefoxUbuntuThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 MediumfirefoxUbuntuA website could have obscured the fullscreen notification by using an option element by...6.5 MediumfirefoxUbuntuInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 HighfirefoxUbuntuWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 MediumfirefoxUbuntuMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighfirefoxUbuntuWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighfirefoxUbuntuA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumfirefoxUbuntuCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighfirefoxUbuntuAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalfirefoxUbuntuWhen choosing a site-isolated process for a document loaded from a data: URL that was the result...6.1 MediumfirefoxUbuntuThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighfirefoxUbuntuWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighfirefoxUbuntuAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumfirefoxUbuntuA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumfirefoxUbuntuDocuments were incorrectly assuming an ordering of principal objects when ensuring we were...6.5 MediumfirefoxUbuntuA maliciously crafted favicon could have led to an out of memory crash. This vulnerability...7.5 HighfirefoxUbuntuService workers could reveal script base URL due to dynamic `import()`. This vulnerability...5.3 MediumfirefoxUbuntuA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighfirefoxUbuntuAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumfirefoxUbuntuIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Medium- Show moreLoading…