MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when manipulating floating "first-letter" style elements...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable"...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalMozillaFirefoxopenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalMozillaFirefoxopenSUSEA heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called...7.5 HighMozillaFirefoxopenSUSEA heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing,...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSEWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 HighMozillaFirefoxopenSUSEIf a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests...5.3 MediumMozillaFirefoxopenSUSEJavaScript can be injected into an exported bookmarks file by placing JavaScript code into user...6.1 MediumMozillaFirefoxopenSUSEControl characters prepended before "javascript:" URLs pasted in the addressbar can cause the...6.1 MediumMozillaFirefoxopenSUSEPunycode format text will be displayed for entire qualified international domain names in some...5.3 MediumMozillaFirefoxopenSUSESVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that...5.3 MediumMozillaFirefoxopenSUSEMixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not...7.3 HighMozillaFirefoxopenSUSEA "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the...6.1 MediumMozillaFirefoxopenSUSESome Arabic and Indic vowel marker characters can be combined with Latin characters in a domain...5.3 MediumMozillaFirefoxopenSUSEThe combined, single character, version of the letter 'i' with any of the potential accents in...5.3 MediumMozillaFirefoxopenSUSEA vulnerability where the security wrapper does not deny access to some exposed properties using...5.3 MediumMozillaFirefoxopenSUSEThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 MediumMozillaFirefoxopenSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 MediumMozillaFirefoxopenSUSEThe AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length...5.3 MediumMozillaFirefoxopenSUSEA vulnerability where WebExtensions can download and attempt to open a file of some non...9.8 CriticalMozillaFirefoxopenSUSEThe "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from...5.3 MediumMozillaFirefoxopenSUSEWebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL,...5.3 MediumMozillaFirefoxopenSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal dialog through...5.3 MediumMozillaFirefoxopenSUSEInside the JavaScript parser, a cast of an integer to a narrower type can result in data read...8.2 HighMozillaFirefoxopenSUSEIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalMozillaFirefoxopenSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalMozillaFirefoxopenSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalMozillaFirefoxopenSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 HighMozillaFirefoxopenSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 CriticalMozillaFirefoxopenSUSEA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...5.3 Medium- Show moreLoading…