MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...6.1 MediumMozillaFirefoxopenSUSEIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 HighMozillaFirefoxopenSUSEWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 HighMozillaFirefoxopenSUSEIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 HighMozillaFirefoxopenSUSEWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSESites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumMozillaFirefoxopenSUSEAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalMozillaFirefoxopenSUSEMalicious PDF can inject JavaScript into PDF Viewer8.8 HighMozillaFirefoxopenSUSESame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 CriticalMozillaFirefoxopenSUSEThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 CriticalMozillaFirefoxopenSUSEAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighMozillaFirefoxopenSUSEURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...6.1 MediumMozillaFirefoxopenSUSEIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...5.3 MediumMozillaFirefoxopenSUSEA vulnerability in the notifications Push API where notifications can be sent through service...8.2 HighMozillaFirefoxopenSUSEImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...5.3 MediumMozillaFirefoxopenSUSEA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...7.5 HighMozillaFirefoxopenSUSEA shared worker created from a "data:" URL in one tab can be shared by another tab with a...7.5 HighMozillaFirefoxopenSUSEWebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs...7.5 HighMozillaFirefoxopenSUSEWebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content...7.5 HighMozillaFirefoxopenSUSEIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...6.5 MediumMozillaFirefoxopenSUSEThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...6.5 MediumMozillaFirefoxopenSUSEUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 MediumMozillaFirefoxopenSUSEWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 HighMozillaFirefoxopenSUSEA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...9.8 CriticalMozillaFirefoxopenSUSEThe reader view will display cross-origin content when CORS headers are set to prohibit the...5.3 MediumMozillaFirefoxopenSUSEThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...5.3 MediumMozillaFirefoxopenSUSEIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumMozillaFirefoxopenSUSEWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...9.8 CriticalMozillaFirefoxopenSUSEIf an HTTP authentication prompt is triggered by a background network request from a page or...7.5 HighMozillaFirefoxopenSUSEIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...5.3 MediumMozillaFirefoxopenSUSEThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...7.5 HighMozillaFirefoxopenSUSEDevelopment Tools panels of an extension are required to load URLs for the panels as relative...7.5 HighMozillaFirefoxopenSUSEWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...6.5 MediumMozillaFirefoxopenSUSEAn audio capture session can started under an incorrect origin from the site making the capture...5.3 MediumMozillaFirefoxopenSUSEA Blob URL can violate origin attribute segregation, allowing it to be accessed from a private...4.3 MediumMozillaFirefoxopenSUSEThe printing process can bypass local access protections to read files available through symlinks...5.3 MediumMozillaFirefoxopenSUSEStyle editor traffic in the Developer Tools can be routed through a service worker hosted on a...5.3 MediumMozillaFirefoxopenSUSEWebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file....7.8 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Critical- Show moreLoading…