MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEBy displaying a form validity message in the correct location at the same time as a permission...4.3 MediumMozillaFirefoxopenSUSEThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 MediumMozillaFirefoxopenSUSEThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 MediumMozillaFirefoxopenSUSEWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 HighMozillaFirefoxopenSUSEThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 CriticalMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 HighMozillaFirefoxopenSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 HighMozillaFirefoxopenSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 HighMozillaFirefoxopenSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEMixed-content checks were unable to analyze opaque origins which led to some mixed content being...6.5 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 HighMozillaFirefoxopenSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 HighMozillaFirefoxopenSUSEFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 HighMozillaFirefoxopenSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 HighMozillaFirefoxopenSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 MediumMozillaFirefoxopenSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 HighMozillaFirefoxopenSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 HighMozillaFirefoxopenSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 HighMozillaFirefoxopenSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 MediumMozillaFirefoxopenSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 HighMozillaFirefoxopenSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 HighMozillaFirefoxopenSUSEIf a user had granted a permission to a webpage and saved that grant, any webpage running on the...9.8 CriticalMozillaFirefoxopenSUSEPassword autofill was enabled without user interaction on insecure websites on Firefox for...8.8 HighMozillaFirefoxopenSUSEData race in crossbeam-deque9.8 CriticalMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEThrough a series of DOM manipulations, a message, over which the attacker had control of the text...6.5 MediumMozillaFirefoxopenSUSEWhen network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings,...4.3 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library....8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 HighMozillaFirefoxopenSUSEA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 HighMozillaFirefoxopenSUSELack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content...6.1 MediumMozillaFirefoxopenSUSEFirefox for Android would become unstable and hard-to-recover when a website opened too many...4.3 MediumMozillaFirefoxopenSUSEAddress bar search suggestions in private browsing mode were re-using session data from normal...4.3 MediumMozillaFirefoxopenSUSEA malicious website that causes an HTTP Authentication dialog to be spawned could trick the built...5.3 MediumMozillaFirefoxopenSUSEOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 HighMozillaFirefoxopenSUSEThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 MediumMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 HighMozillaFirefoxopenSUSEMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...8.8 HighMozillaFirefoxopenSUSEWhen styling and rendering an oversized `<select>` element, Firefox did not apply correct...4.3 MediumMozillaFirefoxopenSUSEFirefox used to cache the last filename used for printing a file. When generating a filename for...4.3 MediumMozillaFirefoxopenSUSEWhen a user has already allowed a website to access microphone and camera, disabling camera...4.3 MediumMozillaFirefoxopenSUSEWhen Web Render components were destructed, a race condition could have caused undefined behavior...7.5 High- Show moreLoading…