MozillaFirefox-branding-SLE vulnerabilities (SUSE)
440 vulnerabilities.
MozillaFirefox-branding-SLESUSEjavascript: URLs executed on object and embed tags8.1 HighMozillaFirefox-branding-SLESUSELarge branch table could lead to truncated instruction9.8 CriticalMozillaFirefox-branding-SLESUSEJavaScript engine only wrote partial return value to stack6.5 MediumMozillaFirefox-branding-SLESUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighMozillaFirefox-branding-SLESUSESave as in Devtools could download files without sanitizing the extension8.1 HighMozillaFirefox-branding-SLESUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumMozillaFirefox-branding-SLESUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalMozillaFirefox-branding-SLESUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaFirefox-branding-SLESUSEThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 MediumMozillaFirefox-branding-SLESUSEFirefox for Android opened URLs specified in a link querystring parameter4.3 MediumMozillaFirefox-branding-SLESUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaFirefox-branding-SLESUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaFirefox-branding-SLESUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaFirefox-branding-SLESUSENo warning when opening executable terminal files on macOS8.8 HighMozillaFirefox-branding-SLESUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaFirefox-branding-SLESUSEUse-after-free in FontFaceSet9.8 CriticalMozillaFirefox-branding-SLESUSECalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 MediumMozillaFirefox-branding-SLESUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumMozillaFirefox-branding-SLESUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighMozillaFirefox-branding-SLESUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighMozillaFirefox-branding-SLESUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumMozillaFirefox-branding-SLESUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighMozillaFirefox-branding-SLESUSEFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 MediumMozillaFirefox-branding-SLESUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighMozillaFirefox-branding-SLESUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighMozillaFirefox-branding-SLESUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighMozillaFirefox-branding-SLESUSEInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalMozillaFirefox-branding-SLESUSESelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumMozillaFirefox-branding-SLESUSEMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 HighMozillaFirefox-branding-SLESUSEIncorrect listing of stack frames4.3 MediumMozillaFirefox-branding-SLESUSEIncorrect listing of stack frames5.5 MediumMozillaFirefox-branding-SLESUSECSP violation leakage when using devtools5.3 MediumMozillaFirefox-branding-SLESUSEIncorrect handling of SameSite cookies9.8 CriticalMozillaFirefox-branding-SLESUSEForm validation popups could block exiting full-screen mode4.3 MediumMozillaFirefox-branding-SLESUSEMemory corruption in NSS8.8 HighMozillaFirefox-branding-SLESUSECursor could be moved out of the viewport using pointerlock.4.3 MediumMozillaFirefox-branding-SLESUSELeaving pointerlock by pressing the escape key could be prevented8.8 HighMozillaFirefox-branding-SLESUSEOut-of-bounds read in clipboard component8.2 HighMozillaFirefox-branding-SLESUSEFirefox Android missed activation delay to prevent tapjacking8.8 HighMozillaFirefox-branding-SLESUSEMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighMozillaFirefox-branding-SLESUSEMemory corruption in thread creation7.4 HighMozillaFirefox-branding-SLESUSEMemory corruption in NSS9.8 CriticalMozillaFirefox-branding-SLESUSERace condition in permission assignment4.7 MediumMozillaFirefox-branding-SLESUSEMemory corruption in WebGL API6.3 MediumMozillaFirefox-branding-SLESUSEMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 HighMozillaFirefox-branding-SLESUSEA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 MediumMozillaFirefox-branding-SLESUSEA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 HighMozillaFirefox-branding-SLESUSEUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 MediumMozillaFirefox-branding-SLESUSEThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 MediumMozillaFirefox-branding-SLESUSEA website could have obscured the fullscreen notification by using an option element by...6.5 Medium- Show moreLoading…