firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighfirefoxUbuntuThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighfirefoxUbuntuThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighfirefoxUbuntuThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumfirefoxUbuntuA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighfirefoxUbuntuFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighfirefoxUbuntuWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumfirefoxUbuntuThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory...8.8 HighfirefoxUbuntuMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighfirefoxUbuntuIf an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS...6.5 MediumfirefoxUbuntuWhen an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly...6.5 MediumfirefoxUbuntuRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumfirefoxUbuntuWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighfirefoxUbuntuOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighfirefoxUbuntuThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumfirefoxUbuntuIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumfirefoxUbuntuOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxUbuntuMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalfirefoxUbuntuA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....4.3 MediumfirefoxUbuntuDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighfirefoxUbuntuA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumfirefoxUbuntuDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighfirefoxUbuntuAn attacker with temporary script access to a site could have set a cookie containing invalid...5.3 MediumfirefoxUbuntuUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...5.3 MediumfirefoxUbuntuIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumfirefoxUbuntuNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumfirefoxUbuntufirefox regressionsNo scorefirefoxUbuntuVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 HighfirefoxUbuntuElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighfirefoxUbuntuDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...9.8 CriticalfirefoxUbuntuIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...7.5 HighfirefoxUbuntuA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...9.8 CriticalfirefoxUbuntuIn canvas rendering, a compromised content process could have caused a surface to change...7.4 HighfirefoxUbuntuMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalfirefoxUbuntuDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumfirefoxUbuntuA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumfirefoxUbuntuDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighfirefoxUbuntuInteger Overflow in RecordedSourceSurfaceCreation8.6 HighfirefoxUbuntuMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighfirefoxUbuntuMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighfirefoxUbuntuBrowsing Context potentially not cleared when closing Private Window7.5 HighfirefoxUbuntuXLL file extensions were downloadable without warnings4.3 MediumfirefoxUbuntuPush notifications saved to disk unencrypted6.5 MediumfirefoxUbuntuPersisted search terms were formatted as URLs3.1 LowfirefoxUbuntuError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumfirefoxUbuntuMemory corruption in JIT UpdateRegExpStatics6.5 Medium- Show moreLoading…