MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 HighMozillaFirefoxopenSUSEWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 MediumMozillaFirefoxopenSUSEWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 MediumMozillaFirefoxopenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 MediumMozillaFirefoxopenSUSEWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 MediumMozillaFirefoxopenSUSEWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 HighMozillaFirefoxopenSUSECertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 HighMozillaFirefoxopenSUSEThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 CriticalMozillaFirefoxopenSUSECertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 HighMozillaFirefoxopenSUSEIf the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version...6.8 MediumMozillaFirefoxopenSUSEOneCRL was non-functional in the new Firefox for Android due to a missing service initialization....6.5 MediumMozillaFirefoxopenSUSEWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 MediumMozillaFirefoxopenSUSEWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...4.3 MediumMozillaFirefoxopenSUSEUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 MediumMozillaFirefoxopenSUSESearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 HighMozillaFirefoxopenSUSEWhen listening for page changes with a Mutation Observer, a malicious web page could confuse...6.5 MediumMozillaFirefoxopenSUSESome websites have a feature "Show Password" where clicking a button will change a password field...6.5 MediumMozillaFirefoxopenSUSERepeated calls to the history and location interfaces could have been used to hang the browser....4.3 MediumMozillaFirefoxopenSUSECross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 MediumMozillaFirefoxopenSUSEWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 MediumMozillaFirefoxopenSUSEIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 HighMozillaFirefoxopenSUSEDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 HighMozillaFirefoxopenSUSEFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 MediumMozillaFirefoxopenSUSEIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 MediumMozillaFirefoxopenSUSEIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 MediumMozillaFirefoxopenSUSEIncorrect bookkeeping of functions inlined during JIT compilation could have led to memory...8.8 HighMozillaFirefoxopenSUSEA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 MediumMozillaFirefoxopenSUSESide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 MediumMozillaFirefoxopenSUSEIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 CriticalMozillaFirefoxopenSUSEWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 MediumMozillaFirefoxopenSUSEWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 HighMozillaFirefoxopenSUSEIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 CriticalMozillaFirefoxopenSUSEHeap buffer overflow in CefSharp9.6 CriticalMozillaFirefoxopenSUSEUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 HighMozillaFirefoxopenSUSEWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 HighMozillaFirefoxopenSUSEBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 MediumMozillaFirefoxopenSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 MediumMozillaFirefoxopenSUSEWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 HighMozillaFirefoxopenSUSEIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 HighMozillaFirefoxopenSUSEA lock was missing when accessing a data structure and importing certificate information into the...4.3 MediumMozillaFirefoxopenSUSEWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Medium- Show moreLoading…