TI-2021-06287 CVE-2021-23964 · GHSA-4j74-99vm-hh36
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.
RHSA-2021:0290
firefox security update
Released 2021-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-78.7.0-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-78.7.0-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) firefox-78.7.0-2.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-78.7.0-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) firefox-78.7.0-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-78.7.0-2.el7_9
Fixes 5 records
TI-2021-06283 CVE-2021-23960 · GHSA-qvw3-rf6g-2w3x
Performing garbage collection on re-declared JavaScript variables resulted in a…
Priority MEDIUM 41
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash.
TI-2021-06277 CVE-2021-23954 · GHSA-5hq3-8hcw-572m
Type confusion in Mozilla Firefox
Priority MEDIUM 40
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash.
TI-2020-16399 CVE-2020-26976 · GHSA-77q8-crvw-8w9q
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered…
Priority LOW 32
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure co…
TI-2021-06276 CVE-2021-23953 · GHSA-8w82-qfxh-635c
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into…
Priority LOW 22
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data.