MozillaFirefox-branding-SLE vulnerabilities (SUSE)
440 vulnerabilities.
MozillaFirefox-branding-SLESUSEInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 HighMozillaFirefox-branding-SLESUSEWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 MediumMozillaFirefox-branding-SLESUSEMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighMozillaFirefox-branding-SLESUSEWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighMozillaFirefox-branding-SLESUSEA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumMozillaFirefox-branding-SLESUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaFirefox-branding-SLESUSEAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighMozillaFirefox-branding-SLESUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaFirefox-branding-SLESUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaFirefox-branding-SLESUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaFirefox-branding-SLESUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaFirefox-branding-SLESUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaFirefox-branding-SLESUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaFirefox-branding-SLESUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaFirefox-branding-SLESUSEWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 HighMozillaFirefox-branding-SLESUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefox-branding-SLESUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaFirefox-branding-SLESUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaFirefox-branding-SLESUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaFirefox-branding-SLESUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighMozillaFirefox-branding-SLESUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighMozillaFirefox-branding-SLESUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumMozillaFirefox-branding-SLESUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 MediumMozillaFirefox-branding-SLESUSEMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 CriticalMozillaFirefox-branding-SLESUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefox-branding-SLESUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefox-branding-SLESUSEWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighMozillaFirefox-branding-SLESUSEThe MediaError message property should be consistent to avoid leaking information about cross...7.5 HighMozillaFirefox-branding-SLESUSEASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 CriticalMozillaFirefox-branding-SLESUSESVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 MediumMozillaFirefox-branding-SLESUSEEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 MediumMozillaFirefox-branding-SLESUSEThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 MediumMozillaFirefox-branding-SLESUSEWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 MediumMozillaFirefox-branding-SLESUSEThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighMozillaFirefox-branding-SLESUSEIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighMozillaFirefox-branding-SLESUSEA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumMozillaFirefox-branding-SLESUSEIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumMozillaFirefox-branding-SLESUSESession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalMozillaFirefox-branding-SLESUSEAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighMozillaFirefox-branding-SLESUSEIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefox-branding-SLESUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaFirefox-branding-SLESUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaFirefox-branding-SLESUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefox-branding-SLESUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaFirefox-branding-SLESUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaFirefox-branding-SLESUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaFirefox-branding-SLESUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaFirefox-branding-SLESUSEFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 Medium- Show moreLoading…