MozillaFirefox-branding-SLE vulnerabilities (SUSE)
440 vulnerabilities.
MozillaFirefox-branding-SLESUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalMozillaFirefox-branding-SLESUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaFirefox-branding-SLESUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaFirefox-branding-SLESUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumMozillaFirefox-branding-SLESUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumMozillaFirefox-branding-SLESUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumMozillaFirefox-branding-SLESUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumMozillaFirefox-branding-SLESUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaFirefox-branding-SLESUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaFirefox-branding-SLESUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaFirefox-branding-SLESUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaFirefox-branding-SLESUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighMozillaFirefox-branding-SLESUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalMozillaFirefox-branding-SLESUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighMozillaFirefox-branding-SLESUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaFirefox-branding-SLESUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaFirefox-branding-SLESUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaFirefox-branding-SLESUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaFirefox-branding-SLESUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumMozillaFirefox-branding-SLESUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaFirefox-branding-SLESUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaFirefox-branding-SLESUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaFirefox-branding-SLESUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaFirefox-branding-SLESUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaFirefox-branding-SLESUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumMozillaFirefox-branding-SLESUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaFirefox-branding-SLESUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaFirefox-branding-SLESUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumMozillaFirefox-branding-SLESUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaFirefox-branding-SLESUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaFirefox-branding-SLESUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaFirefox-branding-SLESUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaFirefox-branding-SLESUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalMozillaFirefox-branding-SLESUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalMozillaFirefox-branding-SLESUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 CriticalMozillaFirefox-branding-SLESUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 HighMozillaFirefox-branding-SLESUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 MediumMozillaFirefox-branding-SLESUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighMozillaFirefox-branding-SLESUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighMozillaFirefox-branding-SLESUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumMozillaFirefox-branding-SLESUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalMozillaFirefox-branding-SLESUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalMozillaFirefox-branding-SLESUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalMozillaFirefox-branding-SLESUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumMozillaFirefox-branding-SLESUSEThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...5.5 Medium- Show moreLoading…