MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEWhile the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was...4.3 MediumMozillaFirefoxopenSUSEMozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety...8.8 HighMozillaFirefoxopenSUSEWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 HighMozillaFirefoxopenSUSEPreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 MediumMozillaFirefoxopenSUSEIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 CriticalMozillaFirefoxopenSUSEWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 MediumMozillaFirefoxopenSUSEAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 HighMozillaFirefoxopenSUSERegular expression denial of service in Rust's regex crate7.5 HighMozillaFirefoxopenSUSEAn unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable...9.6 CriticalMozillaFirefoxopenSUSERemoving an XSLT parameter during processing could have lead to an exploitable use-after-free. We...8.8 HighMozillaFirefoxopenSUSEA Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...7.1 HighMozillaFirefoxopenSUSEMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxopenSUSEWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 HighMozillaFirefoxopenSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 MediumMozillaFirefoxopenSUSEIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 CriticalMozillaFirefoxopenSUSERemote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have...6.5 MediumMozillaFirefoxopenSUSEIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 HighMozillaFirefoxopenSUSEBy using XSL Transforms, a malicious webserver could have served a user an XSL document that...8.8 HighMozillaFirefoxopenSUSEIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan...8.8 HighMozillaFirefoxopenSUSEA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 MediumMozillaFirefoxopenSUSEThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 HighMozillaFirefoxopenSUSEMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in...8.8 HighMozillaFirefoxopenSUSEMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 HighMozillaFirefoxopenSUSEMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 MediumMozillaFirefoxopenSUSEAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 MediumMozillaFirefoxopenSUSESecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 MediumMozillaFirefoxopenSUSEWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 MediumMozillaFirefoxopenSUSEWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 MediumMozillaFirefoxopenSUSEWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 HighMozillaFirefoxopenSUSECertain network request objects were freed too early when releasing a network request handle....8.8 HighMozillaFirefoxopenSUSEMalicious websites could have tricked users into accepting launching a program to handle an...6.5 MediumMozillaFirefoxopenSUSEApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 HighMozillaFirefoxopenSUSEConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 HighMozillaFirefoxopenSUSEIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 CriticalMozillaFirefoxopenSUSEWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...6.1 MediumMozillaFirefoxopenSUSEIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 MediumMozillaFirefoxopenSUSEUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 MediumMozillaFirefoxopenSUSEDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 MediumMozillaFirefoxopenSUSEUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 MediumMozillaFirefoxopenSUSEWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 MediumMozillaFirefoxopenSUSEWebExtensions with the correct permissions were able to create and install ServiceWorkers for...6.5 MediumMozillaFirefoxopenSUSEFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 HighMozillaFirefoxopenSUSEBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 MediumMozillaFirefoxopenSUSEAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 HighMozillaFirefoxopenSUSEUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 MediumMozillaFirefoxopenSUSEThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 HighMozillaFirefoxopenSUSEMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 MediumMozillaFirefoxopenSUSEFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...8.1 HighMozillaFirefoxopenSUSEDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Medium- Show moreLoading…