7089 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-15654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are...
Linux Distros Unpatched Vulnerability : CVE-2020-15653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on...
Mozilla Firefox ESR < 128.8
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-16 advisory. - Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. So...
PT-2025-9655 · Mozilla +9 · Firefox +9
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 136 Firefox ESR versions prior to 115.21 Firefox ESR versions prior to 128.8 Description: A compromised content process could trigger a use-after-free in the Browser process by sending bad StreamData over AudioIPC...
KLA81176 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability can be exploited ...
Mozilla Firefox ESR < 115.21
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.21. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-15 advisory. - Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and...
KLA81175 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, inject malicious code. Below is a complete list of vulnerabilities: 1. Out of bound...
Linux Distros Unpatched Vulnerability : CVE-2020-15656
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the cod...
KLA81177 DoS vulnerability in Mozilla Firefox ESR
Denial of service vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2025-16 Related products Mozilla-Firefox-ESR CVE list CVE-2025-1932 critical Solution Update to the latest version Download Firefox...
Linux Distros Unpatched Vulnerability : CVE-2017-5448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write in ClearKeyDecryptor while decrypting some Clearkey-encrypted media content. The ClearKeyDecryptor code runs within the Gecko Media Plugi...
Security Vulnerabilities fixed in Firefox ESR 115.21 — Mozilla
In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. It was possibl...
Security Vulnerabilities fixed in Firefox ESR 128.8 — Mozilla
In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. It was possibl...
GHSA-G23M-H4V3-G2QQ vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-XHXM-P3QV-QPRC vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-9VQR-5J64-P9WR vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-563C-G7MM-G4XP vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-69X6-6JQX-Q847 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-7M9H-4QG6-4HMH vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...