firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighfirefoxopenEulerIf temporary "one-time" permissions, such as the ability to use the Camera, were granted to a...8.8 HighfirefoxopenEulerWhen following a redirect to a publicly accessible web extension file, the URL may have been...6.5 MediumfirefoxopenEulerWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 MediumfirefoxopenEulerSometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumfirefoxopenEulerUnder certain circumstances, a ServiceWorker's offline cache may have leaked to the file system...4.3 MediumfirefoxopenEulerWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumfirefoxopenEulerModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighfirefoxopenEulerAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighfirefoxopenEulerAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior....9.8 CriticalfirefoxopenEulerCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighfirefoxopenEulerThe return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have...7.5 HighfirefoxopenEulerWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighfirefoxopenEulerDue to URL previews in the network panel of developer tools improperly storing URLs, query...8.8 HighfirefoxopenEulerA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumfirefoxopenEulerPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighfirefoxopenEulerThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumfirefoxopenEulerAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighfirefoxopenEulerCalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumfirefoxopenEulerContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumfirefoxopenEulerURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumfirefoxopenEulerMalicious command could be hidden in devtools output on Windows6.5 MediumfirefoxopenEulerArbitrary file read from GTK drag and drop on Linux6.5 MediumfirefoxopenEulerMozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory...8.8 HighfirefoxopenEulerMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team...8.8 HighfirefoxopenEulerMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the...8.8 HighfirefoxopenEulerBecause Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who...8.8 HighfirefoxopenEulerAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighfirefoxopenEulerA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalfirefoxopenEulerMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighfirefoxopenEulerThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 MediumfirefoxopenEulerA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighfirefoxopenEulerMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighfirefoxopenEulerUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumfirefoxopenEulerIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS...6.5 MediumfirefoxopenEulerIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumfirefoxopenEulerService Workers did not detect Private Browsing Mode correctly in all cases, which could have led...4.3 MediumfirefoxopenEulerKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumfirefoxopenEulerWhen downloading an HTML file, if the title of the page was formatted as a filename with a...7.8 HighfirefoxopenEulerWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighfirefoxopenEulerCross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumfirefoxopenEulerWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumfirefoxopenEulerThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighfirefoxopenEulerThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumfirefoxopenEulerIf an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after...7.5 HighfirefoxopenEulerIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalfirefoxopenEulerCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighfirefoxopenEulerA vulnerability found in nss. By this security vulnerability, nss client auth crash without a...7.5 HighfirefoxopenEulerInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumfirefoxopenEulerAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 Medium- Show moreLoading…