mozjs38 vulnerabilities (Ubuntu)
1,842 vulnerabilities.
mozjs38UbuntuMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediummozjs38UbuntuMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediummozjs38UbuntuMemory corruption when using JavaScript Text Segmentation7.7 Highmozjs38UbuntuCompartment mismatch when parsing JavaScript JSON module4.0 Mediummozjs38UbuntuAlt-Svc ALPN validation failure when redirected4.0 Mediummozjs38UbuntuUse-after-free when breaking lines in text5.3 Mediummozjs38UbuntuWebChannel APIs susceptible to confused deputy attack5.4 Mediummozjs38UbuntuMissing thread synchronization primitives could have led to a data race on members of the...6.5 Mediummozjs38UbuntuMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highmozjs38UbuntuA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the...6.5 Mediummozjs38Ubuntu`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was...9.1 Criticalmozjs38UbuntuA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 Criticalmozjs38UbuntuWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highmozjs38UbuntuThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediummozjs38UbuntuOn Android, Firefox may have inadvertently allowed viewing saved passwords without the required...5.7 Mediummozjs38UbuntuA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediummozjs38UbuntuEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediummozjs38UbuntuThe incorrect domain may have been displayed in the address bar during an interrupted navigation...4.3 Mediummozjs38UbuntuAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediummozjs38Ubuntumatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3 Mediummozjs38UbuntuPotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 Mediummozjs38UbuntuMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highmozjs38UbuntuBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highmozjs38UbuntuA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediummozjs38UbuntuRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediummozjs38UbuntuVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediummozjs38UbuntuTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediummozjs38UbuntuIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediummozjs38UbuntuThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediummozjs38UbuntuAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highmozjs38UbuntuA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highmozjs38UbuntuWhen manipulating the selection node cache, an attacker may have been able to cause unexpected...6.5 Mediummozjs38UbuntuAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalmozjs38UbuntuMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 Highmozjs38UbuntuMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalmozjs38UbuntuMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalmozjs38UbuntuA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highmozjs38UbuntuA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highmozjs38UbuntuBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediummozjs38UbuntuA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediummozjs38UbuntuIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highmozjs38UbuntuAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highmozjs38UbuntuAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highmozjs38UbuntuA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalmozjs38UbuntuMemory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory...9.8 Criticalmozjs38UbuntuMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalmozjs38UbuntuIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediummozjs38UbuntuA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalmozjs38UbuntuThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalmozjs38UbuntuFirefox normally asks for confirmation before asking the operating system to find an application...7.5 High- Show moreLoading…