MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighMozillaFirefoxSUSEA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighMozillaFirefoxSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 CriticalMozillaFirefoxSUSEIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalMozillaFirefoxSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 CriticalMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 HighMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 MediumMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 MediumMozillaFirefoxSUSENode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 LowMozillaFirefoxSUSENode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 CriticalMozillaFirefoxSUSEThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumMozillaFirefoxSUSEThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalMozillaFirefoxSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumMozillaFirefoxSUSEThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumMozillaFirefoxSUSENode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 HighMozillaFirefoxSUSENode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 HighMozillaFirefoxSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 MediumMozillaFirefoxSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalMozillaFirefoxSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalMozillaFirefoxSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalMozillaFirefoxSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalMozillaFirefoxSUSENode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 HighMozillaFirefoxSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function...5.5 MediumMozillaFirefoxSUSEWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumMozillaFirefoxSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 HighMozillaFirefoxSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 Medium- Show moreLoading…