MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 CriticalMozillaFirefoxopenSUSEUpdated firefox packages fix security vulnerabilityNo scoreMozillaFirefoxopenSUSEAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 HighMozillaFirefoxopenSUSEA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalMozillaFirefoxopenSUSEAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 CriticalMozillaFirefoxopenSUSEA non-existent chrome.manifest file will attempt to be loaded during startup from the primary...5.5 MediumMozillaFirefoxopenSUSEOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...5.3 MediumMozillaFirefoxopenSUSEIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...7.5 HighMozillaFirefoxopenSUSEA malicious site could spoof the contents of the print preview window if popup windows are...7.5 HighMozillaFirefoxopenSUSEA "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL...6.5 MediumMozillaFirefoxopenSUSEIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 HighMozillaFirefoxopenSUSEAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 MediumMozillaFirefoxopenSUSEWhen dragging content from the primary browser pane to the addressbar on a malicious site, it is...5.3 MediumMozillaFirefoxopenSUSEIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 HighMozillaFirefoxopenSUSEAn attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:"...5.3 MediumMozillaFirefoxopenSUSEThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 MediumMozillaFirefoxopenSUSEA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 HighMozillaFirefoxopenSUSEMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticalMozillaFirefoxopenSUSEVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumMozillaFirefoxopenSUSEUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumMozillaFirefoxopenSUSEA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 HighMozillaFirefoxopenSUSECertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumMozillaFirefoxopenSUSEA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalMozillaFirefoxopenSUSEWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalMozillaFirefoxopenSUSEA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalMozillaFirefoxopenSUSEJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalMozillaFirefoxopenSUSEThe "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla...6.1 MediumMozillaFirefoxopenSUSESpecial "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages...9.8 CriticalMozillaFirefoxopenSUSEThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalMozillaFirefoxopenSUSEWebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the...6.1 MediumMozillaFirefoxopenSUSEA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 HighMozillaFirefoxopenSUSEThe existence of a specifically requested local file can be found due to the double firing of the...3.3 LowMozillaFirefoxopenSUSEWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 HighMozillaFirefoxopenSUSEData sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will...7.5 HighMozillaFirefoxopenSUSEProxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with...5.9 MediumMozillaFirefoxopenSUSEURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumMozillaFirefoxopenSUSEFeed preview for RSS feeds can be used to capture errors and exceptions generated by privileged...7.5 HighMozillaFirefoxopenSUSEThe "export" function in the Certificate Viewer can force local filesystem navigation when the ...7.5 HighMozillaFirefoxopenSUSEA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalMozillaFirefoxopenSUSEUse-after-free vulnerability in Web Animations when interacting with cycle collection found...7.5 High- Show moreLoading…