MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumMozillaFirefoxSUSEAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumMozillaFirefoxSUSEA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighMozillaFirefoxSUSEOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighMozillaFirefoxSUSEWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumMozillaFirefoxSUSEA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalMozillaFirefoxSUSEA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalMozillaFirefoxSUSEIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighMozillaFirefoxSUSEAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSEMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalMozillaFirefoxSUSEFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumMozillaFirefoxSUSEWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumMozillaFirefoxSUSERequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumMozillaFirefoxSUSEAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumMozillaFirefoxSUSEDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighMozillaFirefoxSUSEMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighMozillaFirefoxSUSEDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumMozillaFirefoxSUSEWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumMozillaFirefoxSUSEBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumMozillaFirefoxSUSEIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighMozillaFirefoxSUSEAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumMozillaFirefoxSUSE<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumMozillaFirefoxSUSEWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighMozillaFirefoxSUSEPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumMozillaFirefoxSUSEIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalMozillaFirefoxSUSEWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumMozillaFirefoxSUSEAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighMozillaFirefoxSUSERegular expression denial of service in Rust's regex crate7.5 HighMozillaFirefoxSUSEAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalMozillaFirefoxSUSERemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighMozillaFirefoxSUSEA Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...7.1 HighMozillaFirefoxSUSEMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxSUSEWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighMozillaFirefoxSUSEWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighMozillaFirefoxSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumMozillaFirefoxSUSEIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalMozillaFirefoxSUSEIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighMozillaFirefoxSUSEIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumMozillaFirefoxSUSEA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 MediumMozillaFirefoxSUSEThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 HighMozillaFirefoxSUSEMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighMozillaFirefoxSUSEMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumMozillaFirefoxSUSEAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumMozillaFirefoxSUSESecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumMozillaFirefoxSUSEWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumMozillaFirefoxSUSEWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumMozillaFirefoxSUSEWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighMozillaFirefoxSUSECertain network request objects were freed too early when releasing a network request handle....8.8 HighMozillaFirefoxSUSEMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Medium- Show moreLoading…