4230 matches found
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The lookup function in xmlparse.c within Expat also known as libexpat has an integer overflow before version 2.4.3...
Astra Linux – vulnerability in Firefox and Thunderbird
DOM bypass of same-origin policy: Notifications component. This vulnerability has been fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...
Astra Linux – vulnerability in Firefox
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited ...
Astra Linux – Vulnerability in Firefox
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, it was rendered using page fonts. Side-channel attacks on the text using specially crafted fonts could have led to this text being interpreted by the webpage. This vulnerability affects Firefox versions earlier...
Astra Linux – vulnerability in Firefox
Under unusual circumstances, a single thread may survive beyond the end of its manager’s lifetime during shutdown. This could result in a use-after-free condition that may lead to a crash exploitable by attackers. This vulnerability affects Firefox versions prior to 98...
Astra Linux – vulnerability in Firefox
Potential race conditions in IndexedDB might have led to memory corruption, resulting in a potentially exploitable crash. This vulnerability affects Firefox 132 and Thunderbird 132...
Astra Linux – Vulnerability in Firefox
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object’s debugger vector. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
Astra Linux – vulnerability in Firefox
The memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – vulnerability in Firefox
The absence of thread synchronization primitives might have resulted in a data race involving members of the PlaybackParams structure. This vulnerability affects Firefox 133 and Thunderbird 133...
Astra Linux – Vulnerability in Firefox
DoS attacks in the Graphics: ImageLib component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – Vulnerability in Firefox
Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3...
Astra Linux – vulnerability in Firefox
A null pointer dereference may have occurred inadvertently in pk12util, specifically in the SECASN1DecodeItemUtil function, when processing malformed or improperly formatted input files. This vulnerability affects Firefox 133 and Thunderbird 133...
Astra Linux – Vulnerability in Firefox
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – Vulnerability in Firefox
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – vulnerability in Firefox
Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 111...
Astra Linux – vulnerability in Firefox
The MediaError message property should remain consistent to prevent leakage of information regarding cross-origin resources; however, for a same-site cross-origin resource, the message might have leaked data that could enable XS-Leaks attacks. This vulnerability affects Firefox versions earlier...
Astra Linux – vulnerability in Firefox
Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This...
Astra Linux – Vulnerability in Firefox
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 106. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execut...
Astra Linux – vulnerability in Firefox
Service Workers failed to correctly detect Private Browsing Mode in all cases, which could result in Service Workers being written to disk for websites accessed via Private Browsing Mode. This would not have prevented them from running again, but it would have allowed Private Browsing Mode detail...