MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...8.8 HighMozillaFirefoxopenSUSEPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 HighMozillaFirefoxopenSUSEThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 MediumMozillaFirefoxopenSUSEWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 HighMozillaFirefoxopenSUSEA compromised content process could have performed session history manipulations it should not...4.3 MediumMozillaFirefoxopenSUSEA race condition with requestPointerLock() and setTimeout() could have resulted in a user...3.1 LowMozillaFirefoxopenSUSEIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 HighMozillaFirefoxopenSUSEThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 MediumMozillaFirefoxopenSUSEDue to unexpected data type conversions, a use-after-free could have occurred when interacting...8.8 HighMozillaFirefoxopenSUSEBy utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the...6.5 MediumMozillaFirefoxopenSUSEWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 HighMozillaFirefoxopenSUSEA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEA malicious extension with the 'search' permission could have installed a new search engine whose...6.5 MediumMozillaFirefoxopenSUSEIf an attacker is able to alter specific about:config values (for example malware running on the...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 HighMozillaFirefoxopenSUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 MediumMozillaFirefoxopenSUSEBy causing a transition on a parent node by removing a CSS rule, an invalid property for a marker...6.5 MediumMozillaFirefoxopenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 MediumMozillaFirefoxopenSUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEFirefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a...5.3 MediumMozillaFirefoxopenSUSENavigations through the Android-specific `intent` URL scheme could have been misused to escape...7.4 HighMozillaFirefoxopenSUSEAn XSS bug in internal error pages could have led to various spoofing attacks, including other...6.1 MediumMozillaFirefoxopenSUSEContext-specific code was included in a shared jump table; resulting in assertions being...6.5 MediumMozillaFirefoxopenSUSEWhen processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the...6.5 MediumMozillaFirefoxopenSUSEOne phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www...8.8 HighMozillaFirefoxopenSUSEThe DOMParser API did not properly process '<noscript>' elements for escaping. This could be used...6.1 MediumMozillaFirefoxopenSUSEThe developer page about:memory has a Measure function for exploring what object types the...6.5 MediumMozillaFirefoxopenSUSEWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...8.1 HighMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 HighMozillaFirefoxopenSUSEWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 MediumMozillaFirefoxopenSUSEAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 MediumMozillaFirefoxopenSUSEIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 HighMozillaFirefoxopenSUSEWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 MediumMozillaFirefoxopenSUSEIncorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a...8.8 HighMozillaFirefoxopenSUSEFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 HighMozillaFirefoxopenSUSEPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 HighMozillaFirefoxopenSUSEThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 MediumMozillaFirefoxopenSUSEAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 MediumMozillaFirefoxopenSUSEThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 MediumMozillaFirefoxopenSUSEUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 HighMozillaFirefoxopenSUSEIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 MediumMozillaFirefoxopenSUSEWhen a malicious application installed on the user's device broadcast an Intent to Firefox for...6.5 MediumMozillaFirefoxopenSUSEBy attempting to connect a website using an unresponsive port, an attacker could have controlled...6.5 MediumMozillaFirefoxopenSUSEUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 High- Show moreLoading…