Total 819 security vulnerabilities recorded for debian software and firmware.
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some...
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache head...
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. Th...
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow f...
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the di...
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploi...
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitabl...
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This ...
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, res...
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentia...
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content d...
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerabi...
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results...
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable cr...
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2....
When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB s...
The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data thef...
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use. This res...
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with ...
Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for dom...
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with ...
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This ...
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed ...
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due ...