MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighMozillaFirefoxopenSUSEA memory corruption vulnerability in Skia that can occur when using transforms to make gradients,...9.8 CriticalMozillaFirefoxopenSUSEUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalMozillaFirefoxopenSUSEJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSEAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighMozillaFirefoxopenSUSEMozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an...6.1 MediumMozillaFirefoxopenSUSEThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 HighMozillaFirefoxopenSUSEHTML tags received from the Pocket server will be processed without sanitization and any...9.8 CriticalMozillaFirefoxopenSUSEExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighMozillaFirefoxopenSUSEUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalMozillaFirefoxopenSUSEUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalMozillaFirefoxopenSUSEMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighMozillaFirefoxopenSUSEUse-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not...8.1 HighMozillaFirefoxopenSUSEEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumMozillaFirefoxopenSUSEA buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later...7.5 HighMozillaFirefoxopenSUSEMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEThe Mozilla Updater can be made to choose an arbitrary target working directory for output files...5.5 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighMozillaFirefoxopenSUSERedirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the ...8.8 HighMozillaFirefoxopenSUSEWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 HighMozillaFirefoxopenSUSECanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 HighMozillaFirefoxopenSUSEAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 MediumMozillaFirefoxopenSUSEAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 CriticalMozillaFirefoxopenSUSEContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 MediumMozillaFirefoxopenSUSEA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 HighMozillaFirefoxopenSUSEA use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially...7.8 HighMozillaFirefoxopenSUSEA use-after-free during web animations when working with timelines resulting in a potentially...7.5 HighMozillaFirefoxopenSUSETwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 MediumMozillaFirefoxopenSUSEAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 CriticalMozillaFirefoxopenSUSEDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 MediumMozillaFirefoxopenSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighMozillaFirefoxopenSUSEAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 MediumMozillaFirefoxopenSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalMozillaFirefoxopenSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighMozillaFirefoxopenSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSEWeb content could access information in the HTTP cache if e10s is disabled. This can reveal some...5.9 MediumMozillaFirefoxopenSUSEA potentially exploitable use-after-free crash during actor destruction with service workers....9.8 CriticalMozillaFirefoxopenSUSEMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 HighMozillaFirefoxopenSUSEMozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a...8.8 HighMozillaFirefoxopenSUSEMozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which...6.5 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 CriticalMozillaFirefoxopenSUSEUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 CriticalMozillaFirefoxopenSUSEMozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full...4.3 MediumMozillaFirefoxopenSUSEHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 High- Show moreLoading…