MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 MediumMozillaFirefoxSUSEA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighMozillaFirefoxSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaFirefoxSUSEA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumMozillaFirefoxSUSEWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumMozillaFirefoxSUSEA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumMozillaFirefoxSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaFirefoxSUSEAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumMozillaFirefoxSUSEThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 MediumMozillaFirefoxSUSE`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 MediumMozillaFirefoxSUSEMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighMozillaFirefoxSUSEThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighMozillaFirefoxSUSEA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighMozillaFirefoxSUSEThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighMozillaFirefoxSUSEThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumMozillaFirefoxSUSEA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighMozillaFirefoxSUSEFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighMozillaFirefoxSUSEWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumMozillaFirefoxSUSEThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighMozillaFirefoxSUSEMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighMozillaFirefoxSUSERelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumMozillaFirefoxSUSEWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighMozillaFirefoxSUSEOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighMozillaFirefoxSUSEThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumMozillaFirefoxSUSEIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumMozillaFirefoxSUSEOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumMozillaFirefoxSUSEAddress bar spoofing via bidirectional characters6.5 MediumMozillaFirefoxSUSEMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxSUSEMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalMozillaFirefoxSUSEA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....4.3 MediumMozillaFirefoxSUSEDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighMozillaFirefoxSUSEThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...6.5 MediumMozillaFirefoxSUSEA website could have obscured the full screen notification by using the file open dialog. This...4.3 MediumMozillaFirefoxSUSEA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumMozillaFirefoxSUSEDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighMozillaFirefoxSUSEAn attacker with temporary script access to a site could have set a cookie containing invalid...5.3 MediumMozillaFirefoxSUSEUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...5.3 MediumMozillaFirefoxSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaFirefoxSUSENSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumMozillaFirefoxSUSEElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighMozillaFirefoxSUSEMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalMozillaFirefoxSUSEIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 CriticalMozillaFirefoxSUSEDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumMozillaFirefoxSUSEA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumMozillaFirefoxSUSEA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...9.8 CriticalMozillaFirefoxSUSEDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighMozillaFirefoxSUSEBuffer Overflow in WebGL glGetProgramiv8.8 HighMozillaFirefoxSUSEInteger Overflow in RecordedSourceSurfaceCreation8.6 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 High- Show moreLoading…