MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighMozillaFirefoxSUSEInformation disclosure in the Networking: Cache component6.2 MediumMozillaFirefoxSUSEInteger overflow in the SVG component8.8 HighMozillaFirefoxSUSEIncorrect boundary conditions in the JavaScript: GC component6.5 MediumMozillaFirefoxSUSESame-origin policy bypass in the Layout component6.5 MediumMozillaFirefoxSUSESandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighMozillaFirefoxSUSESandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighMozillaFirefoxSUSElibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 142 and Thunderbird 1429.8 CriticalMozillaFirefoxSUSESpoofing issue in the Address Bar component6.5 MediumMozillaFirefoxSUSEDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaFirefoxSUSEUninitialized memory in the JavaScript Engine component6.5 MediumMozillaFirefoxSUSESame-origin policy bypass in the Graphics: Canvas2D component8.1 HighMozillaFirefoxSUSESandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxSUSESearch terms persisted in URL bar8.1 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxSUSEIncorrect JavaScript state machine for generators6.5 MediumMozillaFirefoxSUSECSP frame-src was not correctly enforced for paths9.8 CriticalMozillaFirefoxSUSEXSLT documents could bypass CSP8.1 HighMozillaFirefoxSUSEIncorrect URL stripping in CSP reports9.8 CriticalMozillaFirefoxSUSENameless cookies shadow secure cookies9.1 CriticalMozillaFirefoxSUSEDNS rebinding circumvents CORS8.1 HighMozillaFirefoxSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 HighMozillaFirefoxSUSEjavascript: URLs executed on object and embed tags8.1 HighMozillaFirefoxSUSELarge branch table could lead to truncated instruction9.8 CriticalMozillaFirefoxSUSEJavaScript engine only wrote partial return value to stack6.5 MediumMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighMozillaFirefoxSUSESave as in Devtools could download files without sanitizing the extension8.1 HighMozillaFirefoxSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumMozillaFirefoxSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalMozillaFirefoxSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaFirefoxSUSEThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 MediumMozillaFirefoxSUSEFirefox for Android opened URLs specified in a link querystring parameter4.3 MediumMozillaFirefoxSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaFirefoxSUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaFirefoxSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaFirefoxSUSENo warning when opening executable terminal files on macOS8.8 HighMozillaFirefoxSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaFirefoxSUSEUse-after-free in FontFaceSet9.8 CriticalMozillaFirefoxSUSEMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighMozillaFirefoxSUSEMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighMozillaFirefoxSUSEClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumMozillaFirefoxSUSEScript element events leaked cross-origin resource status4.3 MediumMozillaFirefoxSUSEPotential local code execution in “Copy as cURL” command4.8 Medium- Show moreLoading…