MozillaFirefox-branding-SLE vulnerabilities (SUSE)
440 vulnerabilities.
MozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaFirefox-branding-SLESUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaFirefox-branding-SLESUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumMozillaFirefox-branding-SLESUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaFirefox-branding-SLESUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaFirefox-branding-SLESUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaFirefox-branding-SLESUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaFirefox-branding-SLESUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaFirefox-branding-SLESUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaFirefox-branding-SLESUSEData race in crossbeam-deque9.8 CriticalMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighMozillaFirefox-branding-SLESUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumMozillaFirefox-branding-SLESUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumMozillaFirefox-branding-SLESUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighMozillaFirefox-branding-SLESUSEFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 HighMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighMozillaFirefox-branding-SLESUSEThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumMozillaFirefox-branding-SLESUSEJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighMozillaFirefox-branding-SLESUSEA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumMozillaFirefox-branding-SLESUSEWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumMozillaFirefox-branding-SLESUSEAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumMozillaFirefox-branding-SLESUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumMozillaFirefox-branding-SLESUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumMozillaFirefox-branding-SLESUSEWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighMozillaFirefox-branding-SLESUSEDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumMozillaFirefox-branding-SLESUSEWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumMozillaFirefox-branding-SLESUSEIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighMozillaFirefox-branding-SLESUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaFirefox-branding-SLESUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaFirefox-branding-SLESUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaFirefox-branding-SLESUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaFirefox-branding-SLESUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaFirefox-branding-SLESUSEA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighMozillaFirefox-branding-SLESUSEWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumMozillaFirefox-branding-SLESUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumMozillaFirefox-branding-SLESUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighMozillaFirefox-branding-SLESUSEWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 MediumMozillaFirefox-branding-SLESUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaFirefox-branding-SLESUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaFirefox-branding-SLESUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaFirefox-branding-SLESUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaFirefox-branding-SLESUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaFirefox-branding-SLESUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaFirefox-branding-SLESUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaFirefox-branding-SLESUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighMozillaFirefox-branding-SLESUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighMozillaFirefox-branding-SLESUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 High- Show moreLoading…