MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 MediumMozillaFirefoxopenSUSEBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 MediumMozillaFirefoxopenSUSEWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 MediumMozillaFirefoxopenSUSEDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 MediumMozillaFirefoxopenSUSEWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 MediumMozillaFirefoxopenSUSEFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 HighMozillaFirefoxopenSUSEThe code for downloading files did not properly take care of special characters, which led to an...6.5 MediumMozillaFirefoxopenSUSEJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 HighMozillaFirefoxopenSUSEA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 MediumMozillaFirefoxopenSUSEWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 MediumMozillaFirefoxopenSUSEAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 MediumMozillaFirefoxopenSUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxopenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumMozillaFirefoxopenSUSEWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 HighMozillaFirefoxopenSUSEDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 MediumMozillaFirefoxopenSUSEWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 MediumMozillaFirefoxopenSUSEIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 HighMozillaFirefoxopenSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumMozillaFirefoxopenSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighMozillaFirefoxopenSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighMozillaFirefoxopenSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumMozillaFirefoxopenSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighMozillaFirefoxopenSUSEA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 HighMozillaFirefoxopenSUSEWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 MediumMozillaFirefoxopenSUSEUndefined Behavior in bounded Crossbeam channel8.1 HighMozillaFirefoxopenSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 HighMozillaFirefoxopenSUSEWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 MediumMozillaFirefoxopenSUSEMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 MediumMozillaFirefoxopenSUSEMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 HighMozillaFirefoxopenSUSEWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 MediumMozillaFirefoxopenSUSENSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 MediumMozillaFirefoxopenSUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 HighMozillaFirefoxopenSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalMozillaFirefoxopenSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 CriticalMozillaFirefoxopenSUSEA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 LowMozillaFirefoxopenSUSEDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 HighMozillaFirefoxopenSUSEIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalMozillaFirefoxopenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumMozillaFirefoxopenSUSEA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 High- Show moreLoading…