Kevin Brosnan

توجد مشكلة «استخدام بعد التحرير» (use-after-free) داخل مكون DOM Networking. تحدث مشكلة «استخدام بعد التحرير» عندما يستمر التطبيق في استخدام مؤشر بعد تحريره، وهو ما يمكن أن يستغله مهاجم عن بُعد للتأثير على سرية وسلامة وتوافر المعلومات المحمية.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات Firefox Focus الأقدم من الإصدار 142 الوصف: توجد مشكلة تتعلق بالتزييف في مكون شريط العناوين في Firefox Focus لنظام Android. التوصيات: قم بتحديث Firefox Focus إلى الإصدار 142 أو أحدث.

The issue is related to memory safety bugs, which have shown evidence of memory corruption. It is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. The vulnerability can be exploited by a remote attacker using a specially crafted web page, potentially allowing them to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow vulnerability that may allow a remote attacker to execute arbitrary code.

The issue is related to a missing service initialization in OneCRL, which could result in a failure to enforce some certificate revocations. This problem only affects Firefox for Android, with other operating systems being unaffected.

The issue is related to a security policy vulnerability in the Firefox web browser, which is connected to an insufficient input validation mechanism. This could allow a remote attacker to impact data integrity due to the use of the HTTP protocol. Additionally, if the upgrade-insecure-requests directive was specified in the Content Security Policy and a link was dragged and dropped from that page, the link was not upgraded to HTTPS.