firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighfirefoxopenEulerConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumfirefoxopenEulerDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumfirefoxopenEulerBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumfirefoxopenEulerWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumfirefoxopenEulerWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 HighfirefoxopenEulerlibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighfirefoxopenEulerMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighfirefoxopenEulerMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighfirefoxopenEulerAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 MediumfirefoxopenEulerA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighfirefoxopenEulerAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumfirefoxopenEulerWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighfirefoxopenEulerWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumfirefoxopenEulerWhen using the Performance API, an attacker was able to notice subtle differences between...6.1 MediumfirefoxopenEulerWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 MediumfirefoxopenEulerMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 CriticalfirefoxopenEulerAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighfirefoxopenEulerAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighfirefoxopenEulerWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighfirefoxopenEulerThe MediaError message property should be consistent to avoid leaking information about cross...7.5 HighfirefoxopenEulerASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 CriticalfirefoxopenEulerSVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 MediumfirefoxopenEulerEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 MediumfirefoxopenEulerThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 MediumfirefoxopenEulerWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 MediumfirefoxopenEulerThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighfirefoxopenEulerIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighfirefoxopenEulerA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumfirefoxopenEulerIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumfirefoxopenEulerSession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalfirefoxopenEulerAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighfirefoxopenEulerIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighfirefoxopenEulerMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla...9.8 CriticalfirefoxopenEulerIf array shift operations are not used, the Garbage Collector may have become confused about...4.3 MediumfirefoxopenEulerAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumfirefoxopenEulerFirefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity...6.5 MediumfirefoxopenEulerAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumfirefoxopenEulerA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighfirefoxopenEulerOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighfirefoxopenEulerWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumfirefoxopenEulerA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalfirefoxopenEulerA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalfirefoxopenEulerUse after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 HighfirefoxopenEulerIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighfirefoxopenEulerAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighfirefoxopenEulerMozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory...8.8 HighfirefoxopenEulerThe Performance API did not properly hide the fact whether a request cross-origin resource has...4.3 MediumfirefoxopenEulerFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumfirefoxopenEulerWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 Medium- Show moreLoading…