MozillaFirefox-branding-SLED vulnerabilities (SUSE)
292 vulnerabilities.
MozillaFirefox-branding-SLEDSUSEThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...5.5 MediumMozillaFirefox-branding-SLEDSUSEThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...7.8 HighMozillaFirefox-branding-SLEDSUSEThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 HighMozillaFirefox-branding-SLEDSUSEThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...7.5 HighMozillaFirefox-branding-SLEDSUSEDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...5.3 MediumMozillaFirefox-branding-SLEDSUSEA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...9.8 CriticalMozillaFirefox-branding-SLEDSUSECharacters from the "Canadian Syllabics" unicode block can be mixed with characters from other...5.3 MediumMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...9.1 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP...9.8 CriticalMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...7.5 HighMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during specific user interactions with the input method editor ...8.8 HighMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability with content viewer listeners that results in a potentially...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during video control operations when a "<track>" element holds a...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...9.8 CriticalMozillaFirefox-branding-SLEDSUSEMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...9.8 CriticalMozillaFirefox-branding-SLEDSUSEFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....9.8 CriticalMozillaFirefox-branding-SLEDSUSEA potential memory corruption and crash when using Skia content when drawing content outside of...7.5 HighMozillaFirefox-branding-SLEDSUSEIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...6.1 MediumMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...9.1 CriticalMozillaFirefox-branding-SLEDSUSEDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 MediumMozillaFirefox-branding-SLEDSUSEMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability in frame selection triggered by a combination of malicious script...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA mechanism to bypass file system access protections in the sandbox using the file system request...9.8 CriticalMozillaFirefox-branding-SLEDSUSEThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...7.5 HighMozillaFirefox-branding-SLEDSUSEA mechanism to bypass file system access protections in the sandbox to use the file picker to...7.5 HighMozillaFirefox-branding-SLEDSUSEA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...4.3 MediumMozillaFirefox-branding-SLEDSUSEA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...7.5 HighMozillaFirefox-branding-SLEDSUSEAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 HighMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 CriticalMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 HighMozillaFirefox-branding-SLEDSUSEA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 HighMozillaFirefox-branding-SLEDSUSEAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 CriticalMozillaFirefox-branding-SLEDSUSEAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 HighMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 CriticalMozillaFirefox-branding-SLEDSUSEMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 CriticalMozillaFirefox-branding-SLEDSUSEMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalMozillaFirefox-branding-SLEDSUSEStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 High- Show moreLoading…