Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2024-48561)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled Exception in Add-on Signature Verification...

ALSA-2024:10702 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled Exception in Add-on Signature Verification...

FreeBSD : librewolf -- Undefined behavior in selection node cache (b73d1f2a-96de-11ef-9e71-00d8612f03c8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b73d1f2a-96de-11ef-9e71-00d8612f03c8 advisory. [email protected] reports: When manipulating the selection node cache, an attacker may have been abl...

CVE-2024-10467 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2024-44474)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from the ability to enumerate external protocol handlers via a pop-up window. No details of the vulnerability are currently available...

Updated rootcerts nss firefox firefox-l10n packages fix security vulnerabilities

The current versions have reached EOL and several security vulnerabilities were fixed by Mozilla. We are having some issues that are delaying the build for some architectures, so for the moment we are releasing this update just for x8664...

[SECURITY] [DSA 5783-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5783-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2024 https://www.debian.org/security/faq -...

RHSA-2023:1790 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2023:4463 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2023:3597 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2023:0295 Red Hat Security Advisory: firefox security update

Bulletin has no description...

Type Confusion

Firefox is vulnerable to a type confusion vulnerability. The vulnerability is due to an error in the ECMA-262 specification relating to Async Generators, which could lead to memory corruption. Attackers can exploit this to cause an exploitable crash...

RHSA-2020:0819 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2013:0271 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2011:1437 Red Hat Security Advisory: firefox security update

Bulletin has no description...

CVE-2024-8388 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-7527 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-7518 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2024-6613 Incorrect listing of stack frames

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...