mozjs38 vulnerabilities (Ubuntu)
1,842 vulnerabilities.
mozjs38UbuntuUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Criticalmozjs38UbuntuJIT miscompilation in the JavaScript Engine: JIT component7.5 Highmozjs38UbuntuMitigation bypass in the Web Compatibility: Tooling component5.4 Mediummozjs38UbuntuSpoofing issue in the WebAuthn component in Firefox for Android6.5 Mediummozjs38UbuntuMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 Highmozjs38UbuntuInformation disclosure in the Networking: Cache component6.2 Mediummozjs38UbuntuInteger overflow in the SVG component8.8 Highmozjs38UbuntuIncorrect boundary conditions in the JavaScript: GC component6.5 Mediummozjs38UbuntuSame-origin policy bypass in the Layout component6.5 Mediummozjs38UbuntuSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 Highmozjs38UbuntuSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 Highmozjs38UbuntuMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highmozjs38UbuntuMemory safety bugs fixed in Firefox 142 and Thunderbird 1429.8 Criticalmozjs38UbuntuDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 Highmozjs38UbuntuMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 Highmozjs38UbuntuUninitialized memory in the JavaScript Engine component6.5 Mediummozjs38UbuntuSame-origin policy bypass in the Graphics: Canvas2D component8.1 Highmozjs38UbuntuSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Criticalmozjs38UbuntuMemory safety bugs fixed in Firefox 141 and Thunderbird 1419.8 Criticalmozjs38UbuntuIncorrect URL truncation9.8 Criticalmozjs38UbuntuMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highmozjs38UbuntuMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highmozjs38UbuntuSearch terms persisted in URL bar8.1 Highmozjs38UbuntuMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highmozjs38UbuntuIncorrect JavaScript state machine for generators6.5 Mediummozjs38UbuntuCSP frame-src was not correctly enforced for paths9.8 Criticalmozjs38UbuntuXSLT documents could bypass CSP8.1 Highmozjs38UbuntuIncorrect URL stripping in CSP reports9.8 Criticalmozjs38UbuntuNameless cookies shadow secure cookies9.1 Criticalmozjs38UbuntuDNS rebinding circumvents CORS8.1 Highmozjs38UbuntuPotential user-assisted code execution in “Copy as cURL” command8.1 Highmozjs38Ubuntujavascript: URLs executed on object and embed tags8.1 Highmozjs38UbuntuLarge branch table could lead to truncated instruction9.8 Criticalmozjs38UbuntuJavaScript engine only wrote partial return value to stack6.5 Mediummozjs38UbuntuMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 Highmozjs38UbuntuSave as in Devtools could download files without sanitizing the extension8.1 Highmozjs38UbuntuHTTPS-Only exception screen lacked anti-clickjacking delay4.3 Mediummozjs38UbuntuWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 Criticalmozjs38UbuntuDNS Requests leaked outside of a configured SOCKS proxy8.6 Highmozjs38UbuntuThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 Mediummozjs38UbuntuFirefox for Android opened URLs specified in a link querystring parameter4.3 Mediummozjs38UbuntuContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediummozjs38Ubuntuconnect-src Content Security Policy restriction could be bypassed9.1 Criticalmozjs38UbuntuIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediummozjs38UbuntuNo warning when opening executable terminal files on macOS8.8 Highmozjs38UbuntuThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediummozjs38UbuntuUse-after-free in FontFaceSet9.8 Criticalmozjs38UbuntuInteger overflow in OrderedHashTable9.8 Criticalmozjs38UbuntuMemory corruption in canvas surfaces9.8 Criticalmozjs38UbuntuUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Medium- Show moreLoading…