MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighMozillaFirefoxSUSEFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumMozillaFirefoxSUSEA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumMozillaFirefoxSUSEA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 MediumMozillaFirefoxSUSEAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 CriticalMozillaFirefoxSUSEUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumMozillaFirefoxSUSEMozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and...8.8 HighMozillaFirefoxSUSEMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighMozillaFirefoxSUSEDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumMozillaFirefoxSUSEWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 MediumMozillaFirefoxSUSEWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighMozillaFirefoxSUSEIf temporary "one-time" permissions, such as the ability to use the Camera, were granted to a...8.8 HighMozillaFirefoxSUSEWhen following a redirect to a publicly accessible web extension file, the URL may have been...6.5 MediumMozillaFirefoxSUSEThe fullscreen notification could have been hidden on Firefox for Android by using download...4.3 MediumMozillaFirefoxSUSEWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumMozillaFirefoxSUSESometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumMozillaFirefoxSUSEUnder certain circumstances, a ServiceWorker's offline cache may have leaked to the file system...4.3 MediumMozillaFirefoxSUSEAndroid applications with unpatched vulnerabilities can be launched from a browser using Intents,...4.3 MediumMozillaFirefoxSUSEBy displaying a prompt with a long description, the fullscreen notification could have been...4.3 MediumMozillaFirefoxSUSEMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 MediumMozillaFirefoxSUSEAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 HighMozillaFirefoxSUSEA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighMozillaFirefoxSUSEMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighMozillaFirefoxSUSEMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxSUSEWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumMozillaFirefoxSUSEModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighMozillaFirefoxSUSEAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighMozillaFirefoxSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaFirefoxSUSEWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighMozillaFirefoxSUSEA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumMozillaFirefoxSUSEPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighMozillaFirefoxSUSEThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumMozillaFirefoxSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighMozillaFirefoxSUSECalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumMozillaFirefoxSUSEContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumMozillaFirefoxSUSEURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumMozillaFirefoxSUSEArbitrary file read from GTK drag and drop on Linux6.5 MediumMozillaFirefoxSUSEBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumMozillaFirefoxSUSEAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighMozillaFirefoxSUSEA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalMozillaFirefoxSUSEAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighMozillaFirefoxSUSEA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumMozillaFirefoxSUSEMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighMozillaFirefoxSUSEThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 MediumMozillaFirefoxSUSEA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighMozillaFirefoxSUSEAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighMozillaFirefoxSUSEMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighMozillaFirefoxSUSEUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumMozillaFirefoxSUSEIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 Medium- Show moreLoading…