MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSELack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 MediumMozillaFirefoxopenSUSEWhen the RSS Feed preview about:feeds page is framed within another page, it can be used in...8.8 HighMozillaFirefoxopenSUSEIn private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as...5.3 MediumMozillaFirefoxopenSUSEIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 MediumMozillaFirefoxopenSUSEpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 MediumMozillaFirefoxopenSUSEWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumMozillaFirefoxopenSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalMozillaFirefoxopenSUSEA crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is...9.8 CriticalMozillaFirefoxopenSUSEWhen JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64. Some...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalMozillaFirefoxopenSUSECross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 MediumMozillaFirefoxopenSUSEA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 MediumMozillaFirefoxopenSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 CriticalMozillaFirefoxopenSUSELimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...6.5 MediumMozillaFirefoxopenSUSEWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...6.5 MediumMozillaFirefoxopenSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 MediumMozillaFirefoxopenSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 CriticalMozillaFirefoxopenSUSEAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 HighMozillaFirefoxopenSUSEDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...8.8 HighMozillaFirefoxopenSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 HighMozillaFirefoxopenSUSEIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...5.3 MediumMozillaFirefoxopenSUSEThe internal WebBrowserPersist code does not use correct origin context for a resource being...6.5 MediumMozillaFirefoxopenSUSESome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...7.5 HighMozillaFirefoxopenSUSEWhen a new protocol handler is registered, the API accepts a title argument which can be used to...4.3 MediumMozillaFirefoxopenSUSEBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...6.5 MediumMozillaFirefoxopenSUSEA WebExtension can request access to local files without the warning prompt stating that the...7.1 HighMozillaFirefoxopenSUSEA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 MediumMozillaFirefoxopenSUSEBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 HighMozillaFirefoxopenSUSEA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighMozillaFirefoxopenSUSEWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...8.8 HighMozillaFirefoxopenSUSEThe displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in...5.3 MediumMozillaFirefoxopenSUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 CriticalMozillaFirefoxopenSUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 HighMozillaFirefoxopenSUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 MediumMozillaFirefoxopenSUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 HighMozillaFirefoxopenSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 HighMozillaFirefoxopenSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...8.8 HighMozillaFirefoxopenSUSEIncorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a...8.8 High- Show moreLoading…