9761 matches found
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.6.0 ESR. Security Fixes: Mozilla: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver CVE-2023-6856 Mozilla...
DLA-3697-1 firefox-esr - security update
Bulletin has no description...
The vulnerability of the ShutdownObserver() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ShutdownObserver function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to dependencies on behaviors that are undefined for each implementation type. Exploiting this vulnerability could allow a malicious actor to compromise...
Buffer Overflow
firefox:sid is vulnerable to buffer overflow. The vulnerability due to memory corruption which effects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121. It allows an attacker could exploit to run arbitrary code...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to a violation of the buffer’s initial limit, allowing an attacker to compromise data privacy and integrity.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to a violation of the buffer boundary. Exploiting these vulnerabilities allows an attacker to compromise data confidentiality and integrity remotely...
CentOS 7 : firefox (RHSA-2023:4079)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4079 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115,...
Debian: Security Advisory (DSA-5581-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox ESR Security Advisories (MFSA2023-53, MFSA2023-56) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Mozilla Firefox ESR Security Advisories (MFSA2023-53, MFSA2023-56) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Mozilla Firefox and Firefox ESR Information Disclosure Vulnerability (CNVD-2025-0120049)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox and Firefox ESR information disclosure vulnerability can be exploited by attackers to obtain sensitive information...
[SECURITY] [DSA 5581-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5581-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2023 https://www.debian.org/security/faq -...
SUSE CVE-2023-6856
The WebGL DrawElementsInstanced method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
SUSE CVE-2023-6859
A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
SUSE CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
SUSE CVE-2023-6861
The nsWindow::PickerOpenvoid method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
CVE-2023-6863
The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
CVE-2023-6861
The nsWindow::PickerOpenvoid method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
Debian DSA-5581-1 : firefox-esr - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5581 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escap...