MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumMozillaFirefoxSUSEWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighMozillaFirefoxSUSEA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighMozillaFirefoxSUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumMozillaFirefoxSUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumMozillaFirefoxSUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighMozillaFirefoxSUSEWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumMozillaFirefoxSUSEAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumMozillaFirefoxSUSEIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighMozillaFirefoxSUSEFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighMozillaFirefoxSUSEPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighMozillaFirefoxSUSEUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighMozillaFirefoxSUSEIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumMozillaFirefoxSUSEUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSEIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighMozillaFirefoxSUSEWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumMozillaFirefoxSUSEUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumMozillaFirefoxSUSEWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumMozillaFirefoxSUSEWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighMozillaFirefoxSUSECertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighMozillaFirefoxSUSECertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighMozillaFirefoxSUSEUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumMozillaFirefoxSUSESearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighMozillaFirefoxSUSESome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumMozillaFirefoxSUSEWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumMozillaFirefoxSUSEIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighMozillaFirefoxSUSEDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighMozillaFirefoxSUSEFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumMozillaFirefoxSUSEIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumMozillaFirefoxSUSEIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumMozillaFirefoxSUSEA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumMozillaFirefoxSUSESide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumMozillaFirefoxSUSEIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalMozillaFirefoxSUSEHeap buffer overflow in CefSharp9.6 CriticalMozillaFirefoxSUSEUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSEWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighMozillaFirefoxSUSEBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumMozillaFirefoxSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighMozillaFirefoxSUSEIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 HighMozillaFirefoxSUSEBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Medium- Show moreLoading…