MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...9.8 CriticalMozillaFirefoxopenSUSEA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 CriticalMozillaFirefoxopenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 HighMozillaFirefoxopenSUSEIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...8.8 HighMozillaFirefoxopenSUSEWebExtensions bundled with embedded experiments were not correctly checked for proper...9.8 CriticalMozillaFirefoxopenSUSEIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 MediumMozillaFirefoxopenSUSEAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumMozillaFirefoxopenSUSEA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumMozillaFirefoxopenSUSENPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighMozillaFirefoxopenSUSEAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighMozillaFirefoxopenSUSEAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighMozillaFirefoxopenSUSEA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighMozillaFirefoxopenSUSEService workers can use redirection to avoid the tainting of cross-origin resources in some...4.3 MediumMozillaFirefoxopenSUSEIn 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected...5.3 MediumMozillaFirefoxopenSUSEA spoofing vulnerability can occur when a malicious site with an extremely long domain name is...5.3 MediumMozillaFirefoxopenSUSELow descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in...5.3 MediumMozillaFirefoxopenSUSEIf cursor visibility is toggled by script using from 'none' to an image and back through script,...5.3 MediumMozillaFirefoxopenSUSEA combination of an external SVG image referenced on a page and the coloring of anchor links...6.5 MediumMozillaFirefoxopenSUSEThe "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of...7.8 HighMozillaFirefoxopenSUSEA spoofing vulnerability can occur when a page switches to fullscreen mode without user...5.3 MediumMozillaFirefoxopenSUSEOn Windows systems, the logger run by the Windows updater deletes the file "update.log" before it...4.7 MediumMozillaFirefoxopenSUSEOn Windows systems, if non-null-terminated strings are copied into the crash reporter for some...7.5 HighMozillaFirefoxopenSUSEMalicious sites can display a spoofed location bar on a subsequently loaded page when the...4.3 MediumMozillaFirefoxopenSUSEA location bar spoofing attack where the location bar of loaded page will be shown over the...8.8 HighMozillaFirefoxopenSUSEWeak proxy objects have weak references on multiple threads when they should only have them on...9.8 CriticalMozillaFirefoxopenSUSEWhen a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit...7.5 HighMozillaFirefoxopenSUSEThe location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode,...7.5 HighMozillaFirefoxopenSUSEPrivate browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db...3.3 LowMozillaFirefoxopenSUSEA previously installed malicious Android application which defines a specific signature-level...7.5 HighMozillaFirefoxopenSUSEA previously installed malicious Android application with same signature-level permissions as...7.5 HighMozillaFirefoxopenSUSEA mechanism where disruption of the loading of a new web page can cause the previous page's...6.5 MediumMozillaFirefoxopenSUSEThis vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate...7.8 HighMozillaFirefoxopenSUSEWhen the Mozilla Updater is run, if the Updater's log file in the working directory points to a...5.5 MediumMozillaFirefoxopenSUSEA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...7.5 HighMozillaFirefoxopenSUSEIf a text string that happens to be a filename in the operating system's native format is dragged...7.5 HighMozillaFirefoxopenSUSEIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur during WebGL operations. While this results in a...7.5 HighMozillaFirefoxopenSUSEA vulnerability exists in XSLT during number formatting where a negative buffer size may be...7.5 HighMozillaFirefoxopenSUSEThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...6.1 MediumMozillaFirefoxopenSUSEA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...6.1 MediumMozillaFirefoxopenSUSEThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...5.3 MediumMozillaFirefoxopenSUSEThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...4.3 MediumMozillaFirefoxopenSUSEIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...6.5 MediumMozillaFirefoxopenSUSEThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...4.3 MediumMozillaFirefoxopenSUSEWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...7.5 High- Show moreLoading…