Astra Linux – vulnerability in Firefox and Thunderbird

Information disclosure caused by improper boundary conditions in the Audio/Video component. This vulnerability has been addressed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1...

Astra Linux – vulnerability in Firefox and Thunderbird

DOM mitigation bypass: Security component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – vulnerability in Firefox and Thunderbird

We are aware that exploit code for this exists publicly; however, we have not observed any attacks exploiting this flaw in the wild. This vulnerability has been addressed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

Astra Linux – vulnerability in Firefox and Thunderbird

Bypassing of the Same-Origin Policy in the Networking: Cookies component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

The memory safety bug has been fixed in Thunderbird 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs exhibited signs of memory corruption; it is assumed that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been addressed in Firefox...

Astra Linux – vulnerability in Firefox and Thunderbird

Sandbox escape caused by incorrect boundary conditions in the Networking component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability has been fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Astra Linux – vulnerability in Firefox and Thunderbird

Privilege escalation in the Graphics: WebRender component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

JIT miscompilation in the DOM: Core & HTML component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

The memory safety bug has been fixed in Thunderbird 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – vulnerability in Firefox and Thunderbird

Another issue in the Storage: IndexedDB component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – vulnerability in Thunderbird

Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability affects Thunderbird 91.1 and Firefox...

Astra Linux – Vulnerability in Firefox

When selecting a site-isolated process for a document loaded from a data: A URL that was the result of a redirect would be loaded by Firefox in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that hosted an...

Astra Linux – Vulnerability in Firefox and Thunderbird

When resizing a popup after requesting fullscreen access, the popup does not display the fullscreen notification. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

Astra Linux – Vulnerability in Firefox

The sourceMapURL feature in devtools lacked security checks, which would have prevented a webpage from attempting to include local files or other files that should be inaccessible. This vulnerability affects Firefox versions earlier than 99...

Astra Linux – vulnerability in Firefox

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

Astra Linux – Vulnerability in Firefox

In canvas rendering, a compromised content process could cause a surface to change unexpectedly, leading to a memory leak in a privileged process. This memory leak could be exploited to perform a sandbox escape if the correct data was leaked. This vulnerability affects Firefox versions earlier th...

Astra Linux – Vulnerability in Firefox

A memory allocation check was missing, which could lead to a “use-after-free” error if the allocation failed. This could potentially trigger a crash or be exploited to achieve code execution. This vulnerability affects Firefox versions less than 126...

Astra Linux – Vulnerability in Firefox

Mozilla developers reported memory safety bugs in Firefox 92. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 93...