pipewire vulnerabilities (SUSE)
40 vulnerabilities.
-
pipewireSUSE Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
pipewireSUSE Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
pipewireSUSE Search terms persisted in URL bar 8.1 High -
pipewireSUSE Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
pipewireSUSE Incorrect JavaScript state machine for generators 6.5 Medium -
pipewireSUSE CSP frame-src was not correctly enforced for paths 9.8 Critical -
pipewireSUSE XSLT documents could bypass CSP 8.1 High -
pipewireSUSE Incorrect URL stripping in CSP reports 9.8 Critical -
pipewireSUSE Nameless cookies shadow secure cookies 9.1 Critical -
pipewireSUSE DNS rebinding circumvents CORS 8.1 High -
pipewireSUSE Potential user-assisted code execution in “Copy as cURL” command 8.1 High -
pipewireSUSE javascript: URLs executed on object and embed tags 8.1 High -
pipewireSUSE Large branch table could lead to truncated instruction 9.8 Critical -
pipewireSUSE JavaScript engine only wrote partial return value to stack 6.5 Medium -
pipewireSUSE Memory safety bugs fixed in Firefox 140 and Thunderbird 140 8.1 High -
pipewireSUSE Save as in Devtools could download files without sanitizing the extension 8.1 High -
pipewireSUSE HTTPS-Only exception screen lacked anti-clickjacking delay 4.3 Medium -
pipewireSUSE WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate 9.8 Critical -
pipewireSUSE DNS Requests leaked outside of a configured SOCKS proxy 8.6 High -
pipewireSUSE The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed 6.5 Medium -
pipewireSUSE Firefox for Android opened URLs specified in a link querystring parameter 4.3 Medium -
pipewireSUSE Content-Disposition header ignored when a file is included in an embed or object tag 6.1 Medium -
pipewireSUSE connect-src Content Security Policy restriction could be bypassed 9.1 Critical -
pipewireSUSE Incorrect parsing of URLs could have allowed embedding of youtube.com 6.5 Medium -
pipewireSUSE No warning when opening executable terminal files on macOS 8.8 High -
pipewireSUSE The WebCompat WebExtension shipped with Firefox exposed a persistent UUID 4.3 Medium -
pipewireSUSE Use-after-free in FontFaceSet 9.8 Critical -
pipewireSUSE Security update for pipewire No score -
pipewireSUSE Security update for pipewire No score -
pipewireSUSE Security update for pipewire No score -
pipewireSUSE Firefox could be made to load attacker-supplied DLL files from the installation directory. This... 7.8 High -
pipewireSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 78 and... 8.8 High -
pipewireSUSE The code for downloading files did not properly take care of special characters, which led to an... 6.5 Medium -
pipewireSUSE JIT optimizations involving the Javascript arguments object could confuse later optimizations.... 8.8 High -
pipewireSUSE A redirected HTTP request which is observed or modified through a web extension could bypass... 6.5 Medium -
pipewireSUSE When in an endless loop, a website specifying a custom cursor using CSS could make it look like... 6.5 Medium -
pipewireSUSE An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.... 6.5 Medium -
pipewireSUSE By observing the stack trace for JavaScript errors in web workers, it was possible to leak the... 6.5 Medium -
pipewireSUSE Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker... 6.5 Medium -
pipewireSUSE Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to... 8.8 High