MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaFirefoxSUSEError handling for script execution was incorrectly isolated from web content4.3 MediumMozillaFirefoxSUSEOut-of-bounds access when optimizing linear sums8.8 HighMozillaFirefoxSUSEOut-of-bounds access when resolving Promise objects9.8 CriticalMozillaFirefoxSUSEMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighMozillaFirefoxSUSEUnsafe attribute access during XPath parsing4.8 MediumMozillaFirefoxSUSEPotential local code execution in "copy as cURL" command5.7 MediumMozillaFirefoxSUSEProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalMozillaFirefoxSUSEWebGL shader attribute memory corruption in Thunderbird for macOS5.9 MediumMozillaFirefoxSUSEPrivilege escalation in Thunderbird Updater8.8 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighMozillaFirefoxSUSEURL Bar Spoofing via non-BMP Unicode characters7.3 HighMozillaFirefoxSUSEUse-after-free triggered by XSLTProcessor6.5 MediumMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighMozillaFirefoxSUSEAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighMozillaFirefoxSUSEClickjacking the registerProtocolHandler info-bar4.3 MediumMozillaFirefoxSUSEUnexpected GC during RegExp bailout processing6.5 MediumMozillaFirefoxSUSEJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighMozillaFirefoxSUSEInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighMozillaFirefoxSUSEUse-after-free in WebTransportChild7.5 HighMozillaFirefoxSUSEAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalMozillaFirefoxSUSECertificate length was not properly checked8.8 HighMozillaFirefoxSUSEPotential opening of private browsing tabs in normal browsing windows6.5 MediumMozillaFirefoxSUSEUse-after-free during concurrent delazification7.5 HighMozillaFirefoxSUSEA bug in WebAssembly code generation could result in a crash8.8 HighMozillaFirefoxSUSEUse-after-free in Custom Highlight8.8 HighMozillaFirefoxSUSEUse-after-free in XSLT9.8 CriticalMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumMozillaFirefoxSUSEMemory corruption when using JavaScript Text Segmentation7.7 HighMozillaFirefoxSUSECompartment mismatch when parsing JavaScript JSON module4.0 MediumMozillaFirefoxSUSEAlt-Svc ALPN validation failure when redirected4.0 MediumMozillaFirefoxSUSEUse-after-free when breaking lines in text5.3 MediumMozillaFirefoxSUSEWebChannel APIs susceptible to confused deputy attack5.4 MediumMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSEIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighMozillaFirefoxSUSEMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighMozillaFirefoxSUSEA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 CriticalMozillaFirefoxSUSEA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalMozillaFirefoxSUSEWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighMozillaFirefoxSUSEThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumMozillaFirefoxSUSEA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumMozillaFirefoxSUSEEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumMozillaFirefoxSUSEThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 CriticalMozillaFirefoxSUSEAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Medium- Show moreLoading…