firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerPrivilege escalation in the DOM: Notifications component8.8 HighfirefoxopenEulerSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 HighfirefoxopenEulerUse-after-free in the WebRTC: Signaling component9.8 CriticalfirefoxopenEulerUse-after-free in the WebRTC: Audio/Video component8.8 HighfirefoxopenEulerSame-origin policy bypass in the DOM: Workers component8.1 HighfirefoxopenEulerMitigation bypass in the DOM: Security component8.1 HighfirefoxopenEulerSame-origin policy bypass in the DOM: Notifications component8.1 HighfirefoxopenEulerIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 HighfirefoxopenEulerSpoofing issue in Firefox3.4 LowfirefoxopenEulerUse-after-free in the Audio/Video component8.8 HighfirefoxopenEulerMitigation bypass in the DOM: Core & HTML component6.1 MediumfirefoxopenEulerRace condition in the Graphics component7.5 HighfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 1448.8 HighfirefoxopenEulerAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 MediumfirefoxopenEulerSome non-writable Object properties could be modified6.5 MediumfirefoxopenEulerCross-process information leaked due to malicious IPC messages9.8 CriticalfirefoxopenEulerOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalfirefoxopenEulerUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighfirefoxopenEulerInformation disclosure in the Networking: Cache component6.2 MediumfirefoxopenEulerInteger overflow in the SVG component8.8 HighfirefoxopenEulerIncorrect boundary conditions in the JavaScript: GC component6.5 MediumfirefoxopenEulerSame-origin policy bypass in the Layout component6.5 MediumfirefoxopenEulerSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighfirefoxopenEulerSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighfirefoxopenEulerlibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighfirefoxopenEulerSpoofing issue in the Address Bar component6.5 MediumfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighfirefoxopenEulerUninitialized memory in the JavaScript Engine component6.5 MediumfirefoxopenEulerSame-origin policy bypass in the Graphics: Canvas2D component8.1 HighfirefoxopenEulerSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxopenEulerSearch terms persisted in URL bar8.1 HighfirefoxopenEulerMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighfirefoxopenEulerIncorrect JavaScript state machine for generators6.5 MediumfirefoxopenEulerCSP frame-src was not correctly enforced for paths9.8 CriticalfirefoxopenEulerXSLT documents could bypass CSP8.1 HighfirefoxopenEulerIncorrect URL stripping in CSP reports9.8 CriticalfirefoxopenEulerNameless cookies shadow secure cookies9.1 CriticalfirefoxopenEulerDNS rebinding circumvents CORS8.1 HighfirefoxopenEulerPotential user-assisted code execution in “Copy as cURL” command8.1 HighfirefoxopenEulerjavascript: URLs executed on object and embed tags8.1 HighfirefoxopenEulerLarge branch table could lead to truncated instruction9.8 CriticalfirefoxopenEulerJavaScript engine only wrote partial return value to stack6.5 MediumfirefoxopenEulerContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumfirefoxopenEulerIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumfirefoxopenEulerThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumfirefoxopenEulerUse-after-free in FontFaceSet9.8 Critical- Show moreLoading…