MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA malicious Android application could craft an Intent that would have been processed by Firefox...7.5 HighMozillaFirefoxopenSUSEWhen following a link that opened an intent://-schemed URL, causing a custom tab to be opened,...4.7 MediumMozillaFirefoxopenSUSEMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 CriticalMozillaFirefoxopenSUSEInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 LowMozillaFirefoxopenSUSEA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 CriticalMozillaFirefoxopenSUSEOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 HighMozillaFirefoxopenSUSEWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 HighMozillaFirefoxopenSUSEUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 HighMozillaFirefoxopenSUSEUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalMozillaFirefoxopenSUSEWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 MediumMozillaFirefoxopenSUSEThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumMozillaFirefoxopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighMozillaFirefoxopenSUSEAfter a website had entered fullscreen mode, it could have used a previously opened popup to...4.3 MediumMozillaFirefoxopenSUSEWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...6.5 MediumMozillaFirefoxopenSUSEWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighMozillaFirefoxopenSUSEBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighMozillaFirefoxopenSUSEWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighMozillaFirefoxopenSUSEWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...7.5 HighMozillaFirefoxopenSUSEusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumMozillaFirefoxopenSUSECommand line arguments could have been injected during Firefox invocation as a shell handler for...8.8 HighMozillaFirefoxopenSUSEBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighMozillaFirefoxopenSUSEIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumMozillaFirefoxopenSUSEA content process could have modified shared memory relating to crash reporting information,...8.8 HighMozillaFirefoxopenSUSEIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighMozillaFirefoxopenSUSEAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...6.5 MediumMozillaFirefoxopenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaFirefoxopenSUSEDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 MediumMozillaFirefoxopenSUSEIf an XML file is served with a Content Security Policy and the XML file includes an XSL...6.5 MediumMozillaFirefoxopenSUSEDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighMozillaFirefoxopenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumMozillaFirefoxopenSUSEDuring the initialization of a new content process, a pointer offset can be manipulated leading...8.8 HighMozillaFirefoxopenSUSEWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighMozillaFirefoxopenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumMozillaFirefoxopenSUSEIf an image had not loaded correctly (such as when it is not actually an image), it could be...7.4 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighMozillaFirefoxopenSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighMozillaFirefoxopenSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighMozillaFirefoxopenSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighMozillaFirefoxopenSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighMozillaFirefoxopenSUSEImproper refcounting of soft token session objects could cause a use-after-free and crash (likely...8.8 HighMozillaFirefoxopenSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighMozillaFirefoxopenSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 High- Show moreLoading…