Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable due to an unusual sequence of events controlled by an attacker, and alert can therefore display arbitrary albeit unstyled content on top of an uncontrolled page of the attacker's choice...

KLA12335 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, bypass security restrictions, execute arbitrary code, cause denial of service, perform cross-site scripting attack. Below is a complete...

Mozilla Firefox < 94.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 94.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-48 advisory. - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. An access control error vulnerability exists in Mozilla Firefox, which stems from the opportunity encryption feature of HTTP2 RFC 8164 that allows connections to be transparently upgraded to TLS while retaining...

Mozilla Firefox 命令注入漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a failure to display an executable warning when downloading an inetloc file that can run commands on a user's computer. No details of the...

Angle 缓冲区错误漏洞

Angle is a graphics layer engine. It is used in the default WebGl backend of Google Chrome and Mozilla Firefox on Windows platforms. A security vulnerability exists in Angle, which arises when the program incorrectly calculates the depth spacing of data and reads the end of the buffer on upload...

KLA12336 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, bypass security restrictions, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1...

Mozilla Firefox 信息泄露漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to cause sensitive data to be logged to a user's Microsoft account...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a resource management error that can be exploited by attackers to cause memory corruption and potentially exploitable crashes...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a series of navigation that allows Firefox to enter full-screen mode without notifying or warning the user. This could lead to spoofing attack...

Mozilla Firefox ESR < 91.3

The version of Firefox ESR installed on the remote Windows host is prior to 91.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-49 advisory. - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions...

Mozilla Firefox Blocks Malicious Add-ons Installed by 455K Users

Mozilla’s Firefox team has blocked add-ons that were abusing the proxy API in order to prevent around 455,000 users from updating their browsers. In a Monday post, Mozilla’s development team members Rachel Tublitz and Stuart Colville said that they’d discovered the misbehaving add-ons in early...

firefox bug fix and enhancement update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by buffer overflows, allowing attackers to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by buffer overflows. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerabilities of the functions “Stealer::steal”, “Stealer::steal_batch”, and “Stealer::steal_batch_and_pop” in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a malicious actor to execute arbitrary code.

The vulnerability of the functions “Stealer::steal”, “Stealer::stealbatch”, and “Stealer::stealbatchandpop” in browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird arises due to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this...

The vulnerability of the Mozilla Firefox browser, related to errors in processing HTML content, allows a hacker to execute arbitrary code within the system.

The vulnerability of the Mozilla Firefox browser is related to errors in processing HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2021-88948)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the fastify-static module versions 4.2.4 through 4.4.1, which can be exploited by an attacker to redirect a user to an arbitrary website using a double-slash followed...

The vulnerability of the MessageTasks operation in the Mozilla Firefox browser allows a hacker to execute arbitrary code within the system.

The vulnerability of the MessageTasks operation in the Mozilla Firefox browser is related to a memory release error. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the system remotely...

OPENSUSE-SU-2021:3451-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Release 91.2.0 ESR: Fixed: Various stability, functionality, and security fixes MFSA 2021-45 bsc1191332: CVE-2021-38496: Use-after-free in MessageTask CVE-2021-38497:...