https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-1055.htmlhttps://patchthecve.com/cve/CVE-2013-1055.htmlTue, 16 Jun 2026 23:50:46 +0000MEDIUM 4.3: The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was hithttps://patchthecve.com/cve/CVE-2013-1054.htmlhttps://patchthecve.com/cve/CVE-2013-1054.htmlTue, 16 Jun 2026 23:50:46 +0000MEDIUM 4.3: The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus dihttps://patchthecve.com/cve/CVE-2012-0958.htmlhttps://patchthecve.com/cve/CVE-2012-0958.htmlTue, 16 Jun 2026 23:38:34 +0000MEDIUM 4.3: content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.https://patchthecve.com/cve/CVE-2012-0960.htmlhttps://patchthecve.com/cve/CVE-2012-0960.htmlTue, 16 Jun 2026 23:38:35 +0000HIGH 7.5: Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.