MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumMozillaFirefoxSUSEWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighMozillaFirefoxSUSECross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumMozillaFirefoxSUSEWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumMozillaFirefoxSUSEThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighMozillaFirefoxSUSEThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumMozillaFirefoxSUSEIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalMozillaFirefoxSUSEFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumMozillaFirefoxSUSEThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumMozillaFirefoxSUSEService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumMozillaFirefoxSUSEMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxSUSEIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumMozillaFirefoxSUSECertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighMozillaFirefoxSUSEA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighMozillaFirefoxSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaFirefoxSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaFirefoxSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaFirefoxSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaFirefoxSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaFirefoxSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaFirefoxSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaFirefoxSUSEWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 HighMozillaFirefoxSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaFirefoxSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxSUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaFirefoxSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaFirefoxSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaFirefoxSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighMozillaFirefoxSUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighMozillaFirefoxSUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumMozillaFirefoxSUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 MediumMozillaFirefoxSUSEMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 CriticalMozillaFirefoxSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefoxSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefoxSUSEWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighMozillaFirefoxSUSEThe MediaError message property should be consistent to avoid leaking information about cross...7.5 HighMozillaFirefoxSUSEASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 CriticalMozillaFirefoxSUSESVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 MediumMozillaFirefoxSUSEEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 MediumMozillaFirefoxSUSEThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 MediumMozillaFirefoxSUSEWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 MediumMozillaFirefoxSUSEThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighMozillaFirefoxSUSEIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighMozillaFirefoxSUSEA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumMozillaFirefoxSUSEIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumMozillaFirefoxSUSESession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalMozillaFirefoxSUSEAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighMozillaFirefoxSUSEIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighMozillaFirefoxSUSEWhen downloading files on Windows, the % character was not escaped, which could have lead to a...8.8 HighMozillaFirefoxSUSEMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 Critical- Show moreLoading…