MozillaFirefox-branding-SLED vulnerabilities (SUSE)
292 vulnerabilities.
MozillaFirefox-branding-SLEDSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefox-branding-SLEDSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaFirefox-branding-SLEDSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaFirefox-branding-SLEDSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefox-branding-SLEDSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaFirefox-branding-SLEDSUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaFirefox-branding-SLEDSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaFirefox-branding-SLEDSUSEFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 MediumMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighMozillaFirefox-branding-SLEDSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaFirefox-branding-SLEDSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaFirefox-branding-SLEDSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumMozillaFirefox-branding-SLEDSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaFirefox-branding-SLEDSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaFirefox-branding-SLEDSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaFirefox-branding-SLEDSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaFirefox-branding-SLEDSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaFirefox-branding-SLEDSUSEData race in crossbeam-deque9.8 CriticalMozillaFirefox-branding-SLEDSUSEWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighMozillaFirefox-branding-SLEDSUSEDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumMozillaFirefox-branding-SLEDSUSEWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumMozillaFirefox-branding-SLEDSUSEIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaFirefox-branding-SLEDSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaFirefox-branding-SLEDSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaFirefox-branding-SLEDSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaFirefox-branding-SLEDSUSEA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumMozillaFirefox-branding-SLEDSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumMozillaFirefox-branding-SLEDSUSESecurity update for MozillaFirefox, mozilla-nss, mozilla-nsprNo scoreMozillaFirefox-branding-SLEDSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaFirefox-branding-SLEDSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaFirefox-branding-SLEDSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaFirefox-branding-SLEDSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaFirefox-branding-SLEDSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaFirefox-branding-SLEDSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaFirefox-branding-SLEDSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighMozillaFirefox-branding-SLEDSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighMozillaFirefox-branding-SLEDSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighMozillaFirefox-branding-SLEDSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalMozillaFirefox-branding-SLEDSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaFirefox-branding-SLEDSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaFirefox-branding-SLEDSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumMozillaFirefox-branding-SLEDSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Medium- Show moreLoading…