mozjs38 vulnerabilities (Ubuntu)
1,842 vulnerabilities.
mozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 Highmozjs38UbuntuA lock was missing when accessing a data structure and importing certificate information into the...4.3 Mediummozjs38UbuntuWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Mediummozjs38UbuntuFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 Mediummozjs38UbuntuBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediummozjs38UbuntuUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 Mediummozjs38UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highmozjs38UbuntuThe code for downloading files did not properly take care of special characters, which led to an...6.5 Mediummozjs38UbuntuJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 Highmozjs38UbuntuA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 Mediummozjs38UbuntuWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Mediummozjs38UbuntuAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Mediummozjs38UbuntuBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediummozjs38UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 Highmozjs38UbuntuDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Mediummozjs38UbuntuWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Mediummozjs38UbuntuIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 Highmozjs38UbuntuWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediummozjs38UbuntuWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highmozjs38UbuntuWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highmozjs38UbuntuManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediummozjs38UbuntuDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highmozjs38UbuntuA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 Highmozjs38UbuntuWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 Mediummozjs38UbuntuUndefined Behavior in bounded Crossbeam channel8.1 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 Highmozjs38UbuntuWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 Highmozjs38UbuntuWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Mediummozjs38UbuntuMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 Mediummozjs38UbuntuMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highmozjs38UbuntuWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediummozjs38UbuntuUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highmozjs38UbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 Highmozjs38UbuntuThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalmozjs38UbuntuThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalmozjs38UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 Criticalmozjs38UbuntuA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 Lowmozjs38UbuntuDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 Highmozjs38UbuntuIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 Criticalmozjs38UbuntuA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalmozjs38UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalmozjs38UbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediummozjs38UbuntuA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highmozjs38UbuntuMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 Criticalmozjs38UbuntuMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalmozjs38UbuntuInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 Lowmozjs38UbuntuA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 Criticalmozjs38UbuntuOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 High- Show moreLoading…