mozjs68 vulnerabilities (Ubuntu)
1,654 vulnerabilities.
mozjs68UbuntuFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediummozjs68UbuntuWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 Highmozjs68UbuntuMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 Highmozjs68UbuntuMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highmozjs68UbuntuMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 Highmozjs68UbuntuA lock was missing when accessing a data structure and importing certificate information into the...4.3 Mediummozjs68UbuntuWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Mediummozjs68UbuntuFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 Mediummozjs68UbuntuBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Mediummozjs68UbuntuUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 Mediummozjs68UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highmozjs68UbuntuThe code for downloading files did not properly take care of special characters, which led to an...6.5 Mediummozjs68UbuntuJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 Highmozjs68UbuntuA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 Mediummozjs68UbuntuWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Mediummozjs68UbuntuAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Mediummozjs68UbuntuBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediummozjs68UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 Highmozjs68UbuntuDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Mediummozjs68UbuntuWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Mediummozjs68UbuntuIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 Highmozjs68UbuntuWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediummozjs68UbuntuWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highmozjs68UbuntuWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highmozjs68UbuntuManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediummozjs68UbuntuDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highmozjs68UbuntuA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 Highmozjs68UbuntuWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 Mediummozjs68UbuntuUndefined Behavior in bounded Crossbeam channel8.1 Highmozjs68UbuntuMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 Highmozjs68UbuntuMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 Highmozjs68UbuntuWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 Highmozjs68UbuntuWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Mediummozjs68UbuntuMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 Mediummozjs68UbuntuMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highmozjs68UbuntuWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediummozjs68UbuntuUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highmozjs68UbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 Highmozjs68UbuntuThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalmozjs68UbuntuThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalmozjs68UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 Criticalmozjs68UbuntuA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 Lowmozjs68UbuntuDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 Highmozjs68UbuntuIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 Criticalmozjs68UbuntuA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalmozjs68UbuntuMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalmozjs68UbuntuThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediummozjs68UbuntuA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highmozjs68UbuntuMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 Criticalmozjs68UbuntuMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Critical- Show moreLoading…