MozillaFirefox-branding-SLE vulnerabilities (openSUSE)
122 vulnerabilities.
MozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefox-branding-SLEopenSUSESearch terms persisted in URL bar8.1 HighMozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefox-branding-SLEopenSUSEIncorrect JavaScript state machine for generators6.5 MediumMozillaFirefox-branding-SLEopenSUSECSP frame-src was not correctly enforced for paths9.8 CriticalMozillaFirefox-branding-SLEopenSUSEXSLT documents could bypass CSP8.1 HighMozillaFirefox-branding-SLEopenSUSEIncorrect URL stripping in CSP reports9.8 CriticalMozillaFirefox-branding-SLEopenSUSENameless cookies shadow secure cookies9.1 CriticalMozillaFirefox-branding-SLEopenSUSEDNS rebinding circumvents CORS8.1 HighMozillaFirefox-branding-SLEopenSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 HighMozillaFirefox-branding-SLEopenSUSEjavascript: URLs executed on object and embed tags8.1 HighMozillaFirefox-branding-SLEopenSUSELarge branch table could lead to truncated instruction9.8 CriticalMozillaFirefox-branding-SLEopenSUSEJavaScript engine only wrote partial return value to stack6.5 MediumMozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighMozillaFirefox-branding-SLEopenSUSESave as in Devtools could download files without sanitizing the extension8.1 HighMozillaFirefox-branding-SLEopenSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumMozillaFirefox-branding-SLEopenSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 CriticalMozillaFirefox-branding-SLEopenSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaFirefox-branding-SLEopenSUSEThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 MediumMozillaFirefox-branding-SLEopenSUSEFirefox for Android opened URLs specified in a link querystring parameter4.3 MediumMozillaFirefox-branding-SLEopenSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaFirefox-branding-SLEopenSUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaFirefox-branding-SLEopenSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaFirefox-branding-SLEopenSUSENo warning when opening executable terminal files on macOS8.8 HighMozillaFirefox-branding-SLEopenSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaFirefox-branding-SLEopenSUSEUse-after-free in FontFaceSet9.8 CriticalMozillaFirefox-branding-SLEopenSUSECalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 MediumMozillaFirefox-branding-SLEopenSUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumMozillaFirefox-branding-SLEopenSUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighMozillaFirefox-branding-SLEopenSUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighMozillaFirefox-branding-SLEopenSUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumMozillaFirefox-branding-SLEopenSUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighMozillaFirefox-branding-SLEopenSUSEFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 MediumMozillaFirefox-branding-SLEopenSUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighMozillaFirefox-branding-SLEopenSUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighMozillaFirefox-branding-SLEopenSUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 HighMozillaFirefox-branding-SLEopenSUSEInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 CriticalMozillaFirefox-branding-SLEopenSUSESelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 MediumMozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 HighMozillaFirefox-branding-SLEopenSUSEIncorrect listing of stack frames4.3 MediumMozillaFirefox-branding-SLEopenSUSEIncorrect listing of stack frames5.5 MediumMozillaFirefox-branding-SLEopenSUSECSP violation leakage when using devtools5.3 MediumMozillaFirefox-branding-SLEopenSUSEIncorrect handling of SameSite cookies9.8 CriticalMozillaFirefox-branding-SLEopenSUSEForm validation popups could block exiting full-screen mode4.3 MediumMozillaFirefox-branding-SLEopenSUSEMemory corruption in NSS8.8 HighMozillaFirefox-branding-SLEopenSUSECursor could be moved out of the viewport using pointerlock.4.3 MediumMozillaFirefox-branding-SLEopenSUSELeaving pointerlock by pressing the escape key could be prevented8.8 HighMozillaFirefox-branding-SLEopenSUSEOut-of-bounds read in clipboard component8.2 HighMozillaFirefox-branding-SLEopenSUSEFirefox Android missed activation delay to prevent tapjacking8.8 High- Show moreLoading…