MozillaFirefox-branding-SLE vulnerabilities (openSUSE)
122 vulnerabilities.
MozillaFirefox-branding-SLEopenSUSEMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 HighMozillaFirefox-branding-SLEopenSUSEMemory corruption in thread creation7.4 HighMozillaFirefox-branding-SLEopenSUSEMemory corruption in NSS9.8 CriticalMozillaFirefox-branding-SLEopenSUSERace condition in permission assignment4.7 MediumMozillaFirefox-branding-SLEopenSUSEMemory corruption in WebGL API6.3 MediumMozillaFirefox-branding-SLEopenSUSEMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 HighMozillaFirefox-branding-SLEopenSUSEA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 MediumMozillaFirefox-branding-SLEopenSUSEA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 HighMozillaFirefox-branding-SLEopenSUSEUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 MediumMozillaFirefox-branding-SLEopenSUSEThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 MediumMozillaFirefox-branding-SLEopenSUSEA website could have obscured the fullscreen notification by using an option element by...6.5 MediumMozillaFirefox-branding-SLEopenSUSEInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 HighMozillaFirefox-branding-SLEopenSUSEWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 MediumMozillaFirefox-branding-SLEopenSUSEMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighMozillaFirefox-branding-SLEopenSUSEWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighMozillaFirefox-branding-SLEopenSUSEA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumMozillaFirefox-branding-SLEopenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaFirefox-branding-SLEopenSUSEAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighMozillaFirefox-branding-SLEopenSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaFirefox-branding-SLEopenSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaFirefox-branding-SLEopenSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaFirefox-branding-SLEopenSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaFirefox-branding-SLEopenSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaFirefox-branding-SLEopenSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaFirefox-branding-SLEopenSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaFirefox-branding-SLEopenSUSEWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 HighMozillaFirefox-branding-SLEopenSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaFirefox-branding-SLEopenSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefox-branding-SLEopenSUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaFirefox-branding-SLEopenSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaFirefox-branding-SLEopenSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaFirefox-branding-SLEopenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighMozillaFirefox-branding-SLEopenSUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighMozillaFirefox-branding-SLEopenSUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumMozillaFirefox-branding-SLEopenSUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 MediumMozillaFirefox-branding-SLEopenSUSEMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 CriticalMozillaFirefox-branding-SLEopenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefox-branding-SLEopenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefox-branding-SLEopenSUSEWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighMozillaFirefox-branding-SLEopenSUSEThe MediaError message property should be consistent to avoid leaking information about cross...7.5 HighMozillaFirefox-branding-SLEopenSUSEASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 CriticalMozillaFirefox-branding-SLEopenSUSESVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 MediumMozillaFirefox-branding-SLEopenSUSEEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 MediumMozillaFirefox-branding-SLEopenSUSEThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 MediumMozillaFirefox-branding-SLEopenSUSEWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 MediumMozillaFirefox-branding-SLEopenSUSEThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighMozillaFirefox-branding-SLEopenSUSEIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighMozillaFirefox-branding-SLEopenSUSEA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumMozillaFirefox-branding-SLEopenSUSEIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumMozillaFirefox-branding-SLEopenSUSESession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Critical- Show moreLoading…