firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighfirefoxopenEulerIf an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS...6.5 MediumfirefoxopenEulerWhen an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly...6.5 MediumfirefoxopenEulerRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumfirefoxopenEulerWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighfirefoxopenEulerOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighfirefoxopenEulerThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumfirefoxopenEulerIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumfirefoxopenEulerOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumfirefoxopenEulerAddress bar spoofing via bidirectional characters6.5 MediumfirefoxopenEulerMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxopenEulerMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalfirefoxopenEulerA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....4.3 MediumfirefoxopenEulerDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighfirefoxopenEulerA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumfirefoxopenEulerDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighfirefoxopenEulerAn attacker with temporary script access to a site could have set a cookie containing invalid...5.3 MediumfirefoxopenEulerUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...5.3 MediumfirefoxopenEulerIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumfirefoxopenEulerNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumfirefoxopenEulerVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 HighfirefoxopenEulerElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighfirefoxopenEulerDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...9.8 CriticalfirefoxopenEulerIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...7.5 HighfirefoxopenEulerA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...9.8 CriticalfirefoxopenEulerIn canvas rendering, a compromised content process could have caused a surface to change...7.4 HighfirefoxopenEulerMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalfirefoxopenEulerDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumfirefoxopenEulerA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumfirefoxopenEulerDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighfirefoxopenEulerBuffer Overflow in WebGL glGetProgramiv8.8 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighfirefoxopenEulerBrowsing Context potentially not cleared when closing Private Window7.5 HighfirefoxopenEulerXLL file extensions were downloadable without warnings4.3 MediumfirefoxopenEulerPush notifications saved to disk unencrypted6.5 MediumfirefoxopenEulerPersisted search terms were formatted as URLs3.1 LowfirefoxopenEulerError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumfirefoxopenEulerMemory corruption in JIT UpdateRegExpStatics6.5 MediumfirefoxopenEulerMemory corruption in IPC FilePickerShownCallback6.5 MediumfirefoxopenEulerMemory corruption in IPC ColorPickerShownCallback6.5 MediumfirefoxopenEulerMemory corruption in IPC CanvasTranslator6.5 MediumfirefoxopenEulerMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...9.8 CriticalfirefoxopenEulerMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalfirefoxopenEulerWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighfirefoxopenEulerWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 MediumfirefoxopenEulerFull screen notification obscured by external program6.5 MediumfirefoxopenEulerFull screen notification obscured by file open dialog7.5 HighfirefoxopenEulerIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighfirefoxopenEulerRace conditions in reference counting code were found through code inspection. These could have...5.9 Medium- Show moreLoading…