ROS-20240814-06

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to the use of hidden side channels. exploitation of hidden side channels. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected information...

ROS-20240814-05

A vulnerability in the "Save As" function of Mozilla Firefox, Firefox ESR and Thunderbird email client on Windows operating systems is related to insufficient input data validation. Thunderbird email client of Windows operating systems is related to insufficient input data validation. Exploitatio...

The vulnerability in the OffscreenCanvas interface of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to bypass security restrictions.

The vulnerability of the OffscreenCanvas interface in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the activation of functions from an unverified controlled area. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Advisory ROSA-SA-2023-2232

Software: firefox 102.14.0 OS: rosa-server79 packageevrstring: firefox-102.14.0-3.res7.x8664.rpm CVE-ID: CVE-2023-3417 BDU-ID: 2023-03965 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Thunderbird email client exists due to improper handling of the Unicode character for overriding text directio...

The vulnerability of the OffscreenCanvas function in Firefox and Firefox ESR browsers allows a hacker to execute arbitrary code.

The vulnerability of the OffscreenCanvas function in Firefox and Firefox ESR browsers is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the OffscreenCanvas function in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OffscreenCanvas function in Google Chrome browsers is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...