MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSECommand line arguments could have been injected during Firefox invocation as a shell handler for...8.8 HighMozillaFirefoxSUSEBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 MediumMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighMozillaFirefoxSUSEIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumMozillaFirefoxSUSEA content process could have modified shared memory relating to crash reporting information,...8.8 HighMozillaFirefoxSUSEIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighMozillaFirefoxSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaFirefoxSUSEDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 MediumMozillaFirefoxSUSEDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighMozillaFirefoxSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaFirefoxSUSEDuring the initialization of a new content process, a pointer offset can be manipulated leading...8.8 HighMozillaFirefoxSUSEWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighMozillaFirefoxSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighMozillaFirefoxSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighMozillaFirefoxSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighMozillaFirefoxSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighMozillaFirefoxSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighMozillaFirefoxSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighMozillaFirefoxSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaFirefoxSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaFirefoxSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaFirefoxSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaFirefoxSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaFirefoxSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaFirefoxSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaFirefoxSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighMozillaFirefoxSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighMozillaFirefoxSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighMozillaFirefoxSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalMozillaFirefoxSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaFirefoxSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaFirefoxSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumMozillaFirefoxSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumMozillaFirefoxSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumMozillaFirefoxSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaFirefoxSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaFirefoxSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaFirefoxSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaFirefoxSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighMozillaFirefoxSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 High- Show moreLoading…