CLEANSTART-2024-YN90913 When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the origin...

Security vulnerability affects the librewolf package. When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the original and subsequent request were in private and...

CLEANSTART-2024-CF10288 Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors

Security vulnerability affects the librewolf package. Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors...

CLEANSTART-2024-WB05604 Mozilla developers reported memory safety bugs present in Firefox 83

Security vulnerability affects the librewolf package. Mozilla developers reported memory safety bugs present in Firefox 83...

CLEANSTART-2024-DL84734 When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the...

Security vulnerability affects the librewolf package. When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address...

CLEANSTART-2024-WY48100 By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain

Security vulnerability affects the librewolf package. By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain...

CLEANSTART-2024-WJ25675 lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to

Security vulnerability affects the librewolf package. The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to...

CLEANSTART-2024-YQ31782 Mozilla developers reported memory safety bugs present in Firefox 84

Security vulnerability affects the librewolf package. Mozilla developers reported memory safety bugs present in Firefox 84...

CLEANSTART-2024-TE89658 When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission

Security vulnerability affects the librewolf package. When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission...

CLEANSTART-2024-SU55971 XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar

Security vulnerability affects the librewolf package. An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar...

CLEANSTART-2024-WD78196 browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information

Security vulnerability affects the librewolf package. The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information...

CLEANSTART-2024-BO25852 Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox

Security vulnerability affects the librewolf package. Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox...

CLEANSTART-2024-RO16736 ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory

Security vulnerability affects the librewolf package. An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory...

CLEANSTART-2024-BM21957 malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL

Security vulnerability affects the librewolf package. A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL...

CLEANSTART-2024-WX17156 If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was un...

Security vulnerability affects the librewolf package. If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user...

CLEANSTART-2024-UG65293 By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash

Security vulnerability affects the librewolf package. By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash...

CLEANSTART-2024-RU95506 Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories

Security vulnerability affects the librewolf package. Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories...

CLEANSTART-2024-VY78190 When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins

Security vulnerability affects the librewolf package. When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins...

CLEANSTART-2024-BN94283 developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes

Security vulnerability affects the librewolf package. The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes...

CLEANSTART-2024-AJ67044 DOMParser API did not properly process '<noscript>' elements for escaping

Security vulnerability affects the librewolf package. The DOMParser API did not properly process '' elements for escaping...

CLEANSTART-2024-UT42831 One phishing tactic on the web is to provide a link with HTTP Auth

Security vulnerability affects the librewolf package. One phishing tactic on the web is to provide a link with HTTP Auth...