firefox vulnerabilities (openEuler)
1,191 vulnerabilities.
firefoxopenEulerUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 MediumfirefoxopenEulerMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighfirefoxopenEulerClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumfirefoxopenEulerScript element events leaked cross-origin resource status4.3 MediumfirefoxopenEulerPotential local code execution in “Copy as cURL” command4.8 MediumfirefoxopenEulerError handling for script execution was incorrectly isolated from web content4.3 MediumfirefoxopenEulerOut-of-bounds access when optimizing linear sums8.8 HighfirefoxopenEulerOut-of-bounds access when resolving Promise objects9.8 CriticalfirefoxopenEulerMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighfirefoxopenEulerUnsafe attribute access during XPath parsing4.8 MediumfirefoxopenEulerPotential local code execution in "copy as cURL" command5.7 MediumfirefoxopenEulerProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalfirefoxopenEulerPrivilege escalation in Thunderbird Updater8.8 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighfirefoxopenEulerURL Bar Spoofing via non-BMP Unicode characters7.3 HighfirefoxopenEulerUse-after-free triggered by XSLTProcessor6.5 MediumfirefoxopenEulerMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumfirefoxopenEulerMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighfirefoxopenEulerAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighfirefoxopenEulerClickjacking the registerProtocolHandler info-bar4.3 MediumfirefoxopenEulerUnexpected GC during RegExp bailout processing6.5 MediumfirefoxopenEulerJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighfirefoxopenEulerInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighfirefoxopenEulerUse-after-free in WebTransportChild7.5 HighfirefoxopenEulerMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalfirefoxopenEulerMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalfirefoxopenEulerCertificate length was not properly checked8.8 HighfirefoxopenEulerPotential opening of private browsing tabs in normal browsing windows6.5 MediumfirefoxopenEulerUse-after-free during concurrent delazification7.5 HighfirefoxopenEulerA bug in WebAssembly code generation could result in a crash8.8 HighfirefoxopenEulerUse-after-free in Custom Highlight8.8 HighfirefoxopenEulerUse-after-free in XSLT9.8 CriticalfirefoxopenEulerMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumfirefoxopenEulerMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumfirefoxopenEulerMemory corruption when using JavaScript Text Segmentation7.7 HighfirefoxopenEulerCompartment mismatch when parsing JavaScript JSON module4.0 MediumfirefoxopenEulerAlt-Svc ALPN validation failure when redirected4.0 MediumfirefoxopenEulerUse-after-free when breaking lines in text5.3 MediumfirefoxopenEulerWebChannel APIs susceptible to confused deputy attack5.4 MediumfirefoxopenEulerIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighfirefoxopenEulerMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighfirefoxopenEulerWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighfirefoxopenEulerThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumfirefoxopenEulerA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumfirefoxopenEulerEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumfirefoxopenEulerAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 MediumfirefoxopenEulerA malicious website could have included an iframe with an malformed URI resulting in a non...6.5 MediumfirefoxopenEulerMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 High- Show moreLoading…