MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalMozillaFirefoxSUSEThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalMozillaFirefoxSUSEIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighMozillaFirefoxSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalMozillaFirefoxSUSEIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumMozillaFirefoxSUSEpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumMozillaFirefoxSUSEWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumMozillaFirefoxSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalMozillaFirefoxSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 MediumMozillaFirefoxSUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 HighMozillaFirefoxSUSEA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 MediumMozillaFirefoxSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalMozillaFirefoxSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumMozillaFirefoxSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalMozillaFirefoxSUSEAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighMozillaFirefoxSUSEHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumMozillaFirefoxSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighMozillaFirefoxSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 HighMozillaFirefoxSUSENode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighMozillaFirefoxSUSEA service worker can send the activate event on itself periodically which allows it to run...7.5 HighMozillaFirefoxSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighMozillaFirefoxSUSEA WebExtension can request access to local files without the warning prompt stating that the...7.1 HighMozillaFirefoxSUSEA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 MediumMozillaFirefoxSUSEBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 HighMozillaFirefoxSUSEA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighMozillaFirefoxSUSEWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighMozillaFirefoxSUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 CriticalMozillaFirefoxSUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 HighMozillaFirefoxSUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 MediumMozillaFirefoxSUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighMozillaFirefoxSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighMozillaFirefoxSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalMozillaFirefoxSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalMozillaFirefoxSUSEWhen handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random...5.9 MediumMozillaFirefoxSUSEIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighMozillaFirefoxSUSEWindows 10 does not warn users before opening executable files with the SettingContent-ms...8.1 HighMozillaFirefoxSUSEMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalMozillaFirefoxSUSEA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalMozillaFirefoxSUSEAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 Medium- Show moreLoading…