MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighMozillaFirefoxSUSEConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighMozillaFirefoxSUSEIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalMozillaFirefoxSUSEIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumMozillaFirefoxSUSEUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumMozillaFirefoxSUSEDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumMozillaFirefoxSUSEUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumMozillaFirefoxSUSEWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumMozillaFirefoxSUSEFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighMozillaFirefoxSUSEBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumMozillaFirefoxSUSEAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighMozillaFirefoxSUSEUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumMozillaFirefoxSUSEThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighMozillaFirefoxSUSEMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumMozillaFirefoxSUSEDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 MediumMozillaFirefoxSUSEBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumMozillaFirefoxSUSEThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumMozillaFirefoxSUSEThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumMozillaFirefoxSUSEWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighMozillaFirefoxSUSEThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefoxSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaFirefoxSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefoxSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaFirefoxSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaFirefoxSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaFirefoxSUSEFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 MediumMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaFirefoxSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaFirefoxSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumMozillaFirefoxSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaFirefoxSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaFirefoxSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaFirefoxSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaFirefoxSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaFirefoxSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaFirefoxSUSEData race in crossbeam-deque9.8 CriticalMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighMozillaFirefoxSUSEA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighMozillaFirefoxSUSEOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSEA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighMozillaFirefoxSUSEThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 MediumMozillaFirefoxSUSEMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighMozillaFirefoxSUSEPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighMozillaFirefoxSUSEThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumMozillaFirefoxSUSEWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighMozillaFirefoxSUSEIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 High- Show moreLoading…