Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Fedora: Security Advisory for firefox (FEDORA-2020-f389eab5d1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2205-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information disclosure. For Debian 8 'Jessie', these problems have been fixed in version 68.8.0esr-1deb8u1. We recommend that you upgrade your...

Debian: Security Advisory (DLA-2205-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2020:14359-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.8.0 ESR MFSA 2020-17 bsc1171186 CVE-2020-12387 bmo1545345 Use-after-free during worker shutdown CVE-2020-12388 bmo1618911 Sandbox escape with improperly guarded Access Tokens CVE-2020-12389 bmo1554110...

OPENSUSE-SU-2020:0621-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR bsc1171186: - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process typ...

[SECURITY] Fedora 31 Update: firefox-76.0-2.fc31

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 30 Update: firefox-76.0-2.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2020-35374)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the implementation of the address bar in versions of Mozilla Firefox prior to 76. A local attacker could exploit the vulnerability to forge the current address...

Debian: Security Advisory (DSA-4678-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox and Firefox ESR Input Validation Error Vulnerability (CNVD-2020-54930)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.8 an...

SUSE-SU-2020:1218-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR bsc1171186: - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process typ...

SUSE-SU-2020:1209-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR bsc1171186: - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process typ...

[SECURITY] Fedora 32 Update: firefox-76.0-2.fc32

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service attacks. It happens due to memory safety bugs fixed in Firefox...

Unauthorized File Access

Mozilla Firefox is vulnerable to an arbitrary local file access with 'Copy as cURL'...

Use-after-free

Mozilla Firefox is vulnerable to a use-after-free during worker shutdown...

Slackware 14.2 / current : mozilla-firefox (SSA:2020-126-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-126-01. The text itself is copyright C Slackware Linux,...

Mozilla Firefox ESR < 68.8

The version of Firefox ESR installed on the remote Windows host is prior to 68.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-17 advisory. - Mozilla developers and community members Alexandru Michis, Jason Kratzer, philipp, Ted Campbell, Bas Schouten, Andr...