7089 matches found
Oracle Linux 7 : firefox (ELSA-2024-0026)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-0026 advisory. 115.6.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....
DLA-3697-1 firefox-esr - security update
Bulletin has no description...
The vulnerability of the ShutdownObserver() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ShutdownObserver function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to dependencies on behaviors that are undefined for each implementation type. Exploiting this vulnerability could allow a malicious actor to compromise...
Buffer Overflow
firefox:sid is vulnerable to buffer overflow. The vulnerability due to memory corruption which effects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121. It allows an attacker could exploit to run arbitrary code...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to a violation of the buffer’s initial limit, allowing an attacker to compromise data privacy and integrity.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to a violation of the buffer boundary. Exploiting these vulnerabilities allows an attacker to compromise data confidentiality and integrity remotely...
CentOS 7 : firefox (RHSA-2023:4079)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4079 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115,...
Mozilla Firefox ESR Security Advisories (MFSA2023-53, MFSA2023-56) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Debian: Security Advisory (DSA-5581-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox and Firefox ESR Information Disclosure Vulnerability (CNVD-2025-0120049)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox and Firefox ESR information disclosure vulnerability can be exploited by attackers to obtain sensitive information...
[SECURITY] [DSA 5581-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5581-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2023 https://www.debian.org/security/faq -...
SUSE CVE-2023-6856
The WebGL DrawElementsInstanced method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
SUSE CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
SUSE CVE-2023-6859
A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
SUSE CVE-2023-6861
The nsWindow::PickerOpenvoid method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
CVE-2023-6863
The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
CVE-2023-6861
The nsWindow::PickerOpenvoid method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
Debian DSA-5581-1 : firefox-esr - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5581 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escap...
UBUNTU-CVE-2023-6860
The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...