106 matches found
CLEANSTART-2024-BW05155 When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings
Security vulnerability affects the librewolf package. When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings...
CLEANSTART-2024-ZT46895 Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100
Security vulnerability affects the librewolf package. Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100...
CLEANSTART-2024-SL56993 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers
Security vulnerability affects the librewolf package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...
CLEANSTART-2024-ZQ36771 Use after free in Codecs in Google Chrome prior to 101
Security vulnerability affects the librewolf package. Use after free in Codecs in Google Chrome prior to 101...
CLEANSTART-2024-XS70297 Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101
Security vulnerability affects the librewolf package. Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101...
CLEANSTART-2024-VA74259 attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tri...
Security vulnerability affects the librewolf package. An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code...
CLEANSTART-2024-XM47780 Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prom...
Security vulnerability affects the librewolf package. Even when an iframe was sandboxed with allow-top-navigation-by-user-activation, if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate...
CLEANSTART-2024-DH07611 HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes
Security vulnerability affects the librewolf package. The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however it incorrectly did not sanitize xlink:href attributes...
CLEANSTART-2024-SI33715 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
Security vulnerability affects the librewolf package. Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102...
CLEANSTART-2024-RI28210 When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected
Security vulnerability affects the librewolf package. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected...
CLEANSTART-2024-AS26968 When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata
Security vulnerability affects the librewolf package. When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata...
CLEANSTART-2024-CR61469 When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system
Security vulnerability affects the librewolf package. When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system...
CLEANSTART-2024-TU43996 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
Security vulnerability affects the librewolf package. Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102...
Source
Repositorio Fuente de LibreWolf Este repositorio contiene todos los parches y temas que componen LibreWolf, así como scripts y un Makefile para compilar LibreWolf. También está el repositorio de Configuración, que contiene las preferencias de LibreWolf. Resumen de LibreWolf graph LR FFSRCFirefox...
CVE-2025-11940
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
EUVD-2025-35003
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
CVE-2025-11940
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
CVE-2025-11940
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
CVE-2025-11940 LibreWolf Installer setup.nsi uncontrolled search path
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
CVE-2025-11940
The CVE-2025-11940 vulnerability affects LibreWolf up to 143.0.4-1 on Windows, tied to an unknown function in assets/setup.nsi of the Installer component. It enables an uncontrolled search path and requires local access from the attacker; the exploitability is described as difficult. A fix is ava...