mozjs52 vulnerabilities (Ubuntu)
1,829 vulnerabilities.
mozjs52UbuntuWhen the pointer lock is enabled by a website though requestPointerLock(), no user notification...4.3 Mediummozjs52UbuntuThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 Highmozjs52UbuntuLogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 Highmozjs52UbuntuThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 Highmozjs52UbuntuGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalmozjs52UbuntuIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highmozjs52UbuntuA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Mediummozjs52UbuntuA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Mediummozjs52UbuntuWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Mediummozjs52UbuntuThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 Mediummozjs52UbuntuA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highmozjs52UbuntuSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediummozjs52UbuntuNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowmozjs52UbuntuA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediummozjs52UbuntuA compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS)...6.1 Mediummozjs52UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highmozjs52UbuntuIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Mediummozjs52UbuntuIf a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any...5.3 Mediummozjs52UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 Highmozjs52UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 68. Some...9.8 Criticalmozjs52UbuntuA hyperlink using the res: protocol can be used to open local files at a known location in...6.5 Mediummozjs52UbuntuAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highmozjs52UbuntuA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediummozjs52UbuntuEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highmozjs52UbuntuThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediummozjs52UbuntuA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediummozjs52UbuntuWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediummozjs52UbuntuApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediummozjs52UbuntuA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highmozjs52UbuntuThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediummozjs52UbuntuSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediummozjs52UbuntuWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highmozjs52UbuntuActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Mediummozjs52UbuntuA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediummozjs52UbuntuUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 Highmozjs52UbuntuDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediummozjs52UbuntuNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalmozjs52UbuntuA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalmozjs52UbuntuPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highmozjs52UbuntuWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highmozjs52UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalmozjs52UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalmozjs52UbuntuA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highmozjs52UbuntuA race condition is present in the crash generation server used to generate data for the crash...8.3 Highmozjs52UbuntuIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 Highmozjs52UbuntuA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 Highmozjs52UbuntuIn libwebp 0.5.1, there is a double free bug in libwebpmux.7.5 Highmozjs52UbuntuA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 Highmozjs52UbuntuA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Criticalmozjs52UbuntuA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Critical- Show moreLoading…