MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighMozillaFirefoxSUSEThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumMozillaFirefoxSUSEJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighMozillaFirefoxSUSEA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumMozillaFirefoxSUSEWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumMozillaFirefoxSUSEAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumMozillaFirefoxSUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumMozillaFirefoxSUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSEWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighMozillaFirefoxSUSEDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumMozillaFirefoxSUSEWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumMozillaFirefoxSUSEIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighMozillaFirefoxSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaFirefoxSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaFirefoxSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaFirefoxSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaFirefoxSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaFirefoxSUSEA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighMozillaFirefoxSUSEWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumMozillaFirefoxSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighMozillaFirefoxSUSEMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighMozillaFirefoxSUSEWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumMozillaFirefoxSUSESecurity update for MozillaFirefox, mozilla-nss, mozilla-nsprNo scoreMozillaFirefoxSUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighMozillaFirefoxSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalMozillaFirefoxSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalMozillaFirefoxSUSEA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalMozillaFirefoxSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumMozillaFirefoxSUSEA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighMozillaFirefoxSUSEA malicious Android application could craft an Intent that would have been processed by Firefox...7.5 HighMozillaFirefoxSUSEWhen following a link that opened an intent://-schemed URL, causing a custom tab to be opened,...4.7 MediumMozillaFirefoxSUSEMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalMozillaFirefoxSUSEOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighMozillaFirefoxSUSEWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighMozillaFirefoxSUSEUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighMozillaFirefoxSUSEUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalMozillaFirefoxSUSEWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 MediumMozillaFirefoxSUSEThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumMozillaFirefoxSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighMozillaFirefoxSUSEWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighMozillaFirefoxSUSEBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighMozillaFirefoxSUSEWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighMozillaFirefoxSUSEusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Medium- Show moreLoading…