mozjs38 vulnerabilities (Ubuntu)
1,842 vulnerabilities.
mozjs38UbuntuThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 Mediummozjs38UbuntuAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 Mediummozjs38UbuntuThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 Mediummozjs38UbuntuUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highmozjs38UbuntuIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediummozjs38UbuntuUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highmozjs38UbuntuIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 Highmozjs38UbuntuWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediummozjs38UbuntuWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 Mediummozjs38UbuntuUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediummozjs38UbuntuWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediummozjs38UbuntuWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highmozjs38UbuntuCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highmozjs38UbuntuThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 Criticalmozjs38UbuntuCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highmozjs38UbuntuIf the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version...6.8 Mediummozjs38UbuntuOneCRL was non-functional in the new Firefox for Android due to a missing service initialization....6.5 Mediummozjs38UbuntuWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 Mediummozjs38UbuntuWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...4.3 Mediummozjs38UbuntuSearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 Mediummozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highmozjs38UbuntuWhen listening for page changes with a Mutation Observer, a malicious web page could confuse...6.5 Mediummozjs38UbuntuSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediummozjs38UbuntuRepeated calls to the history and location interfaces could have been used to hang the browser....4.3 Mediummozjs38UbuntuCross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 Mediummozjs38UbuntuWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediummozjs38UbuntuIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highmozjs38UbuntuDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highmozjs38UbuntuFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediummozjs38UbuntuIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediummozjs38UbuntuIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediummozjs38UbuntuIncorrect bookkeeping of functions inlined during JIT compilation could have led to memory...8.8 Highmozjs38UbuntuA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediummozjs38UbuntuSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediummozjs38UbuntuIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 Criticalmozjs38UbuntuWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 Mediummozjs38UbuntuWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 Highmozjs38UbuntuIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 Mediummozjs38UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Criticalmozjs38UbuntuUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highmozjs38UbuntuWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 Highmozjs38UbuntuWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highmozjs38UbuntuBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Mediummozjs38UbuntuFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediummozjs38UbuntuWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 Highmozjs38UbuntuMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 High- Show moreLoading…