Open Source Vulnerabilities

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

`EncryptingOutputStream` was susceptible to exposing uninitialized data

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver

OpenAM Authentication Bypass via RADIUS Spoofing

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

<code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt

firefox, firefox, firefox, firefox, firefox

MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information ...

firefox, firefox, firefox, firefox, firefox

ASN

firefox, firefox, firefox, firefox, firefox

SVG <code>&lt;use&gt;</code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API

firefox, firefox, firefox, firefox, firefox

Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prom...

firefox, firefox, firefox, firefox, firefox

HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code>&lt;use&gt;</code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown

firefox, firefox, firefox, firefox, firefox

When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Session history navigations may have led to a use-after-free and potentially exploitable crash

firefox, firefox, firefox, firefox, firefox

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution

firefox, firefox, firefox, firefox, firefox

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected

firefox, firefox, firefox, firefox, firefox

When visiting a website with an overly long URL, the user interface would start to hang

firefox, firefox, firefox, firefox, firefox

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect

firefox, firefox, firefox, firefox, firefox

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102

firefox, firefox, firefox, firefox, firefox

Memory safety bugs present in Firefox 118

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Memory safety bugs present in Firefox 118, Firefox ESR 115

firefox, firefox, firefox, firefox, firefox

malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

During garbage collection extra operations were performed on a object that should not be

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

executable file warning was not presented when downloading

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Security fix for CVE-2023-5726 applied in: firefox 119.0-r0, firefox-esr 115.4.0-r0

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash

firefox, firefox, firefox, firefox, firefox

attacker with temporary script access to a site could have set a cookie containing invalid characters using `document

firefox, firefox, firefox, firefox, firefox

Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay

PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

Hydra: Deposit Claim omits Head state-token spending requirement

highcharts

TuxCare security update for highcharts (1 CVE)

chromium, chromium, chromium

Object lifetime issue in Blink in Google Chrome prior to 72

chromium, chromium, chromium

Use after free in extensions in Google Chrome prior to 83

chromium, chromium, chromium

Out of bounds write in V8 in Google Chrome prior to 83

chromium, chromium, chromium

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83

chromium, chromium, chromium

Use after free in speech in Google Chrome prior to 83

chromium, chromium, chromium

Uninitialized data in PDFium in Google Chrome prior to 89

chromium, chromium, chromium

Insufficient policy enforcement in payments in Google Chrome prior to 89

chromium, chromium, chromium

Use after free in Blink in Google Chrome prior to 89

chromium, chromium, chromium

Insufficient data validation in URL formatting in Google Chrome prior to 89

chromium, chromium, chromium

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89

chromium, chromium, chromium

Insufficient policy enforcement in extensions in Google Chrome prior to 89

chromium, chromium, chromium

Inappropriate implementation in performance APIs in Google Chrome prior to 89

chromium, chromium, chromium

Inappropriate implementation in performance APIs in Google Chrome prior to 89