firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerWhen network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings,...4.3 MediumfirefoxopenEulerA use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library....8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighfirefoxopenEulerA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighfirefoxopenEulerLack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content...6.1 MediumfirefoxopenEulerA malicious webpage could have forced a Firefox for Android user into executing attacker...6.1 MediumfirefoxopenEulerA malicious website that causes an HTTP Authentication dialog to be spawned could trick the built...5.3 MediumfirefoxopenEulerOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...8.8 HighfirefoxopenEulerWhen styling and rendering an oversized `<select>` element, Firefox did not apply correct...4.3 MediumfirefoxopenEulerFirefox used to cache the last filename used for printing a file. When generating a filename for...4.3 MediumfirefoxopenEulerWhen a user has already allowed a website to access microphone and camera, disabling camera...4.3 MediumfirefoxopenEulerWhen Web Render components were destructed, a race condition could have caused undefined behavior...7.5 HighfirefoxopenEulerMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...8.8 HighfirefoxopenEulerPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighfirefoxopenEulerThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumfirefoxopenEulerWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighfirefoxopenEulerA compromised content process could have performed session history manipulations it should not...4.3 MediumfirefoxopenEulerA race condition with requestPointerLock() and setTimeout() could have resulted in a user...3.1 LowfirefoxopenEulerIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighfirefoxopenEulerThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumfirefoxopenEulerDue to unexpected data type conversions, a use-after-free could have occurred when interacting...8.8 HighfirefoxopenEulerBy utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the...6.5 MediumfirefoxopenEulerWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighfirefoxopenEulerA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed...8.8 HighfirefoxopenEulerA malicious extension with the 'search' permission could have installed a new search engine whose...6.5 MediumfirefoxopenEulerIf an attacker is able to alter specific about:config values (for example malware running on the...6.5 MediumfirefoxopenEulerA transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an...5.3 MediumfirefoxopenEulerMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighfirefoxopenEulerA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumfirefoxopenEulerBy causing a transition on a parent node by removing a CSS rule, an invalid property for a marker...6.5 MediumfirefoxopenEulerUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumfirefoxopenEulerA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed...8.8 HighfirefoxopenEulerContext-specific code was included in a shared jump table; resulting in assertions being...6.5 MediumfirefoxopenEulerWhen processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the...6.5 MediumfirefoxopenEulerOne phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www...8.8 HighfirefoxopenEulerThe DOMParser API did not properly process '<noscript>' elements for escaping. This could be used...6.1 MediumfirefoxopenEulerThe developer page about:memory has a Measure function for exploring what object types the...6.5 MediumfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighfirefoxopenEulerWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumfirefoxopenEulerAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumfirefoxopenEulerIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 HighfirefoxopenEulerMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighfirefoxopenEulerWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 MediumfirefoxopenEulerIncorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a...8.8 HighfirefoxopenEulerFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 High- Show moreLoading…