TI-2020-12352 CVE-2020-15678 · GHSA-4rfx-gjvx-jp3h
Use after free in Mozilla Firefox
Priority MEDIUM 42
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free.
RHSA-2020:3835
firefox security update
Released 2020-09-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-78.3.0-1.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-78.3.0-1.el6_10
Fixes 4 records
TI-2020-12347 CVE-2020-15673 · GHSA-662r-59mf-5fxr
Use after free in Mozilla Firefox
Priority MEDIUM 42
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.
TI-2020-12351 CVE-2020-15677 · GHSA-c2xm-2fm6-9338
Open redirect in Mozilla Firefox
Priority LOW 31
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than th…
TI-2020-12350 CVE-2020-15676 · GHSA-m5jf-7x3g-f295
Cross-site scripting in Mozilla Firefox
Priority LOW 30
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element.