Search CVE reports
541 – 550 of 2559 results
Some fixes available 2 of 13
A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird...
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and...
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
Some fixes available 2 of 13
The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
9 affected packages
mozjs52, firefox, mozjs102, mozjs115, mozjs38...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mozjs52 | Not in release | Not in release | Not in release | Needs evaluation | Ignored |
| firefox | Not affected | Not affected | Not affected | Fixed | — |
| mozjs102 | Not in release | Ignored | Ignored | Not in release | — |
| mozjs115 | Not in release | Ignored | Not in release | Not in release | — |
| mozjs38 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mozjs68 | Not in release | Not in release | Not in release | Ignored | — |
| mozjs78 | Not in release | Not in release | Ignored | Not in release | — |
| mozjs91 | Not in release | Not in release | Ignored | Not in release | — |
| thunderbird | Not affected | Not affected | Fixed | Not in release | — |
The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the...
1 affected package
thunderbird
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| thunderbird | — | Not affected | Fixed | Not in release | — |
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.
1 affected package
thunderbird
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| thunderbird | — | Not affected | Fixed | Not in release | — |
Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.
2 affected packages
firefox, thunderbird
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firefox | — | Not affected | Not affected | Not in release | — |
| thunderbird | — | Not affected | Not affected | Not in release | — |