106 matches found
CLEANSTART-2024-BH66439 compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
Security vulnerability affects the librewolf package. A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations...
CLEANSTART-2024-TQ47337 Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache
Security vulnerability affects the librewolf package. Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache...
CLEANSTART-2024-VX80275 By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other a...
Security vulnerability affects the librewolf package. By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user...
CLEANSTART-2024-DV64250 When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code
Security vulnerability affects the librewolf package. When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code...
CLEANSTART-2024-XS19848 Firefox for Android would become unstable and hard-to-recover when a website opened too many popups
Security vulnerability affects the librewolf package. Firefox for Android would become unstable and hard-to-recover when a website opened too many popups...
CLEANSTART-2024-BL92418 Firefox used to cache the last filename used for printing a file
Security vulnerability affects the librewolf package. Firefox used to cache the last filename used for printing a file...
CLEANSTART-2024-XU32460 Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correct...
Security vulnerability affects the librewolf package. Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain with the new domain correctly shown in the address bar resulting in possib...
CLEANSTART-2024-CH32472 When network partitioning was enabled, e
Security vulnerability affects the librewolf package. When network partitioning was enabled, e...
CLEANSTART-2024-WR55290 Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded
Security vulnerability affects the librewolf package. Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded...
CLEANSTART-2024-CF84132 Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs
Security vulnerability affects the librewolf package. Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs...
CLEANSTART-2024-TE91482 Mozilla developers reported memory safety bugs present in Firefox 92
Security vulnerability affects the librewolf package. Mozilla developers reported memory safety bugs present in Firefox 92...
CLEANSTART-2024-YK50354 Security fix for CVE-2022-22764 applied in: thunderbird 91.6.0-r0, librewolf 97.0-r0
CVE-2022-22764 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2024-BQ41006 Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it
Security vulnerability affects the librewolf package. Under certain circumstances, a JavaScript alert or prompt could have been shown while another website was displayed underneath it...
CLEANSTART-2024-WS80649 Remote Agent, used in WebDriver, did not validate the Host or Origin headers
Security vulnerability affects the librewolf package. Remote Agent, used in WebDriver, did not validate the Host or Origin headers...
CLEANSTART-2024-UR48687 By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab wa...
Security vulnerability affects the librewolf package. By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed...
CLEANSTART-2024-WI98059 When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content
Security vulnerability affects the librewolf package. When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content...
CLEANSTART-2024-VZ22734 When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...
Security vulnerability affects the librewolf package. When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed...
CLEANSTART-2024-ZR94862 In unusual circumstances, an individual thread may outlive the thread's manager during shutdown
Security vulnerability affects the librewolf package. In unusual circumstances, an individual thread may outlive the thread's manager during shutdown...
CLEANSTART-2024-DS96619 Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97
Security vulnerability affects the librewolf package. Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97...
CLEANSTART-2024-RR31291 SVG's <code><use></code> element could have been used to load unexpected content that could have executed script in certain circumstances
Security vulnerability affects the librewolf package. SVG's use element could have been used to load unexpected content that could have executed script in certain circumstances...