firefox-harfbuzz vulnerabilities (SUSE)
119 vulnerabilities.
-
firefox-harfbuzzSUSE Security update for MozillaFirefox, mozilla-nss, mozilla-nspr No score -
firefox-harfbuzzSUSE Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360... 8.8 High -
firefox-harfbuzzSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 69 and... 8.8 High -
firefox-harfbuzzSUSE Failure to correctly handle null bytes when processing HTML entities resulted in Firefox... 6.1 Medium -
firefox-harfbuzzSUSE If two same-origin documents set document.domain differently to become cross-origin, it was... 6.1 Medium -
firefox-harfbuzzSUSE By using a form with a data URI it was possible to gain access to the privileged JSONView object... 5.4 Medium -
firefox-harfbuzzSUSE A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted... 8.8 High -
firefox-harfbuzzSUSE An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer... 8.8 High -
firefox-harfbuzzSUSE When following the value's prototype chain, it was possible to retain a reference to a locale,... 8.8 High -
firefox-harfbuzzSUSE The Firefox installer allows Firefox to be installed to a custom user writable location, leaving... 7.8 High -
firefox-harfbuzzSUSE Logging-related command line parameters are not properly sanitized when Firefox is launched by... 8.8 High -
firefox-harfbuzzSUSE The Mozilla Maintenance Service does not guard against files being hardlinked to another file in... 7.0 High -
firefox-harfbuzzSUSE Given a compromised sandboxed content process due to a separate vulnerability, it is possible to... 9.3 Critical -
firefox-harfbuzzSUSE In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing... 7.5 High -
firefox-harfbuzzSUSE It is possible to delete an IndexedDB key value and subsequently try to extract it during... 8.8 High -
firefox-harfbuzzSUSE A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash.... 6.5 Medium -
firefox-harfbuzzSUSE A vulnerability exists in WebRTC where malicious web content can use probing techniques on the... 4.3 Medium -
firefox-harfbuzzSUSE WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and... 6.5 Medium -
firefox-harfbuzzSUSE The "Forget about this site" feature in the History pane is intended to remove all saved user... 6.5 Medium -
firefox-harfbuzzSUSE A use-after-free vulnerability can occur while manipulating video elements if the body is freed... 8.8 High -
firefox-harfbuzzSUSE Some HTML elements, such as <title> and <textarea>, can contain literal angle... 6.1 Medium -
firefox-harfbuzzSUSE Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft... 3.7 Low -
firefox-harfbuzzSUSE A same-origin policy violation occurs allowing the theft of cross-origin images through a... 6.5 Medium -
firefox-harfbuzzSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 68,... 8.8 High -
firefox-harfbuzzSUSE If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes... 6.3 Medium -
firefox-harfbuzzSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 68 and... 8.8 High -
firefox-harfbuzzSUSE When a master password is set, it is required to be entered again before stored passwords can be... 9.8 Critical -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
firefox-harfbuzzSUSE http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3... 5.3 Medium -
firefox-harfbuzzSUSE As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a... 8.3 High -
firefox-harfbuzzSUSE A vulnerability exists where if a user opens a locally saved HTML file, this file can use file:... 6.5 Medium -
firefox-harfbuzzSUSE Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
firefox-harfbuzzSUSE The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP... 4.7 Medium -
firefox-harfbuzzSUSE A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
firefox-harfbuzzSUSE When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are... 6.5 Medium -
firefox-harfbuzzSUSE Application permissions give additional remote troubleshooting permission to the site input... 6.1 Medium -
firefox-harfbuzzSUSE A vulnerability exists during the installation of add-ons where the initial fetch ignored the... 7.5 High -
firefox-harfbuzzSUSE The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar... 6.5 Medium -
firefox-harfbuzzSUSE Some unicode characters are incorrectly treated as whitespace during the parsing of web content... 6.1 Medium -
firefox-harfbuzzSUSE When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
firefox-harfbuzzSUSE Activity Stream can display content from sent from the Snippet Service website. This content is... 5.3 Medium -
firefox-harfbuzzSUSE A vulnerability exists where the caret ("^") character is improperly escaped constructing some... 5.3 Medium -
firefox-harfbuzzSUSE Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not... 8.3 High - Show olderLoading…