firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerRequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumfirefoxopenEulerAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumfirefoxopenEulerDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighfirefoxopenEulerIn unusual circumstances, selecting text could cause text selection caching to behave incorrectly...6.5 MediumfirefoxopenEulerSVG's <code><use></code> element could have been used to load unexpected content that could...8.8 HighfirefoxopenEulerThe sourceMapURL feature in devtools was missing security checks that would have allowed a...6.5 MediumfirefoxopenEulerMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighfirefoxopenEulerDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumfirefoxopenEulerWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumfirefoxopenEulerBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumfirefoxopenEulerIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighfirefoxopenEulerAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumfirefoxopenEuler<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumfirefoxopenEulerIn unusual circumstances, an individual thread may outlive the thread's manager during shutdown....6.5 MediumfirefoxopenEulerWhile the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was...4.3 MediumfirefoxopenEulerMozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety...8.8 HighfirefoxopenEulerWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighfirefoxopenEulerPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumfirefoxopenEulerIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalfirefoxopenEulerWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumfirefoxopenEulerAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighfirefoxopenEulerRegular expression denial of service in Rust's regex crate7.5 HighfirefoxopenEulerAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalfirefoxopenEulerRemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighfirefoxopenEulerIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 CriticalfirefoxopenEulerxmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 CriticalfirefoxopenEulerxmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 CriticalfirefoxopenEulerWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 HighfirefoxopenEulerWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighfirefoxopenEulerWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumfirefoxopenEulerIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalfirefoxopenEulerRemote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have...6.5 MediumfirefoxopenEulerIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighfirefoxopenEulerBy using XSL Transforms, a malicious webserver could have served a user an XSL document that...8.8 HighfirefoxopenEulerIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumfirefoxopenEulerMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan...8.8 HighfirefoxopenEulerMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumfirefoxopenEulerAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumfirefoxopenEulerSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumfirefoxopenEulerWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumfirefoxopenEulerWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumfirefoxopenEulerWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighfirefoxopenEulerCertain network request objects were freed too early when releasing a network request handle....8.8 HighfirefoxopenEulerMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumfirefoxopenEulerApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighfirefoxopenEulerConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighfirefoxopenEuleraddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxopenEulerbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxopenEulerdefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalfirefoxopenEulerlookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High- Show moreLoading…