firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighfirefoxopenEulerThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 MediumfirefoxopenEulerAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 MediumfirefoxopenEulerThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 MediumfirefoxopenEulerUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighfirefoxopenEulerIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumfirefoxopenEulerUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighfirefoxopenEulerWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumfirefoxopenEulerWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 MediumfirefoxopenEulerUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumfirefoxopenEulerWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumfirefoxopenEulerWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighfirefoxopenEulerCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighfirefoxopenEulerThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 CriticalfirefoxopenEulerCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighfirefoxopenEulerSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumfirefoxopenEulerCross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 MediumfirefoxopenEulerWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumfirefoxopenEulerIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighfirefoxopenEulerDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighfirefoxopenEulerFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumfirefoxopenEulerIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumfirefoxopenEulerIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumfirefoxopenEulerA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumfirefoxopenEulerSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumfirefoxopenEulerIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 CriticalfirefoxopenEulerWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 MediumfirefoxopenEulerWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 HighfirefoxopenEulerIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 MediumfirefoxopenEulerMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalfirefoxopenEulerHeap buffer overflow in CefSharp9.6 CriticalfirefoxopenEulerUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighfirefoxopenEulerWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 High