Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | firefox-esr | 60.7.0esr-1~deb9u1 |
Vulnerabilities 13
-
Medium 5.3
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called un…
-
Unscored —
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImag…
-
Unscored —
A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main …
-
Unscored —
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use,…
-
Unscored —
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could…
-
Unscored —
If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently…
-
Unscored —
Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an …
-
Unscored —
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBit…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thund…
-
Unscored —CVE-2019-9816 Public exploit
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, a…
-
Unscored —
Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal ima…
-
Unscored —
A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a pote…
-
Unscored —
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results …