MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 CriticalMozillaFirefoxopenSUSEUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 CriticalMozillaFirefoxopenSUSEBuffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in...8.8 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 CriticalMozillaFirefoxopenSUSEThe mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility...8.8 HighMozillaFirefoxopenSUSEThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 HighMozillaFirefoxopenSUSEThe PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote...6.5 MediumMozillaFirefoxopenSUSEHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 CriticalMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 CriticalMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...9.8 CriticalMozillaFirefoxopenSUSEThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...6.5 MediumMozillaFirefoxopenSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 CriticalMozillaFirefoxopenSUSEMozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left...5.3 MediumMozillaFirefoxopenSUSEThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...4.7 MediumMozillaFirefoxopenSUSEMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...4.3 MediumMozillaFirefoxopenSUSEMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...8.1 HighMozillaFirefoxopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighMozillaFirefoxopenSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 MediumMozillaFirefoxopenSUSEInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...6.5 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...8.8 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 CriticalMozillaFirefoxopenSUSEStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...4.3 MediumMozillaFirefoxopenSUSEMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 MediumMozillaFirefoxopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 MediumMozillaFirefoxopenSUSEHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 HighMozillaFirefoxopenSUSEHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 MediumMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 HighMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 MediumMozillaFirefoxopenSUSEThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...8.8 HighMozillaFirefoxopenSUSEMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...6.1 MediumMozillaFirefoxopenSUSEMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...4.3 MediumMozillaFirefoxopenSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...6.5 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...6.5 MediumMozillaFirefoxopenSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 HighMozillaFirefoxopenSUSEHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 HighMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 HighMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 HighMozillaFirefoxopenSUSEExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...9.8 CriticalMozillaFirefoxopenSUSEMozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to...6.5 Medium- Show moreLoading…