Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

71 – 80 of 2680 results

CVE-2024-6604

Medium priority

Some fixes available 3 of 13

Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8 affected packages

firefox, mozjs102, mozjs38, mozjs52, mozjs68...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
mozjs102 Ignored Ignored Not in release — —
mozjs38 Not in release Not in release Not in release Ignored —
mozjs52 Not in release Not in release Ignored Ignored —
mozjs68 Not in release Not in release Ignored — —
mozjs78 Not in release Ignored Not in release — —
mozjs91 Not in release Ignored Not in release — —
thunderbird Not affected Fixed Fixed — —
Show all 8 packages Show less packages

CVE-2024-6603

Medium priority

Some fixes available 3 of 13

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13,...

8 affected packages

firefox, mozjs102, mozjs38, mozjs52, mozjs68...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
mozjs102 Ignored Ignored Not in release — —
mozjs38 Not in release Not in release Not in release Ignored —
mozjs52 Not in release Not in release Ignored Ignored —
mozjs68 Not in release Not in release Ignored — —
mozjs78 Not in release Ignored Not in release — —
mozjs91 Not in release Ignored Not in release — —
thunderbird Not affected Fixed Fixed — —
Show all 8 packages Show less packages

CVE-2024-6602

Medium priority

Some fixes available 3 of 13

A mismatch between allocator and deallocator could have lead to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

8 affected packages

firefox, mozjs102, mozjs38, mozjs52, mozjs68...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
mozjs102 Ignored Ignored Not in release — —
mozjs38 Not in release Not in release Not in release Ignored —
mozjs52 Not in release Not in release Ignored Ignored —
mozjs68 Not in release Not in release Ignored — —
mozjs78 Not in release Ignored Not in release — —
mozjs91 Not in release Ignored Not in release — —
thunderbird Not affected Fixed Fixed — —
Show all 8 packages Show less packages

CVE-2024-6601

Medium priority

Some fixes available 3 of 13

A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

8 affected packages

firefox, mozjs102, mozjs38, mozjs52, mozjs68...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
mozjs102 Ignored Ignored Not in release — —
mozjs38 Not in release Not in release Not in release Ignored —
mozjs52 Not in release Not in release Ignored Ignored —
mozjs68 Not in release Not in release Ignored — —
mozjs78 Not in release Ignored Not in release — —
mozjs91 Not in release Ignored Not in release — —
thunderbird Not affected Fixed Fixed — —
Show all 8 packages Show less packages

CVE-2024-6605

Medium priority
Ignored

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

2 affected packages

firefox, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Not affected — —
Show less packages

CVE-2024-6600

Medium priority
Ignored

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox <...

2 affected packages

firefox, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Not affected — —
Show less packages

CVE-2024-5702

Medium priority
Fixed

Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.

2 affected packages

firefox, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
thunderbird Not affected Fixed Fixed — —
Show less packages

CVE-2024-38313

Medium priority
Not affected

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.

2 affected packages

firefox, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Not affected — —
Show less packages

CVE-2024-38312

Medium priority
Not affected

When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.

2 affected packages

firefox, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Not affected — —
Show less packages

CVE-2024-5699

Medium priority

Some fixes available 1 of 11

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not...

8 affected packages

firefox, mozjs102, mozjs38, mozjs52, mozjs68...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
firefox Not affected Not affected Fixed — —
mozjs102 Ignored Ignored Not in release — —
mozjs38 Not in release Not in release Not in release Ignored —
mozjs52 Not in release Not in release Ignored Ignored —
mozjs68 Not in release Not in release Ignored — —
mozjs78 Not in release Ignored Not in release — —
mozjs91 Not in release Ignored Not in release — —
thunderbird Not affected Not affected Not affected — —
Show all 8 packages Show less packages
  1. Previous page
  2. 6
  3. 7
  4. 8
  5. 9
  6. 10
  7. Next page
Export to JSON