MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 HighMozillaFirefoxopenSUSEWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 HighMozillaFirefoxopenSUSEThe MediaError message property should be consistent to avoid leaking information about cross...7.5 HighMozillaFirefoxopenSUSEASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 CriticalMozillaFirefoxopenSUSESVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 MediumMozillaFirefoxopenSUSEEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 MediumMozillaFirefoxopenSUSEThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 MediumMozillaFirefoxopenSUSEWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 MediumMozillaFirefoxopenSUSEThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 HighMozillaFirefoxopenSUSEIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 HighMozillaFirefoxopenSUSEA malicious website that could create a popup could have resized the popup to overlay the address...6.5 MediumMozillaFirefoxopenSUSEIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 MediumMozillaFirefoxopenSUSESession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 CriticalMozillaFirefoxopenSUSEAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 HighMozillaFirefoxopenSUSEIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 HighMozillaFirefoxopenSUSEWhen downloading files on Windows, the % character was not escaped, which could have lead to a...8.8 HighMozillaFirefoxopenSUSEMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 CriticalMozillaFirefoxopenSUSEIf array shift operations are not used, the Garbage Collector may have become confused about...4.3 MediumMozillaFirefoxopenSUSEAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 MediumMozillaFirefoxopenSUSEFirefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity...6.5 MediumMozillaFirefoxopenSUSEAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 MediumMozillaFirefoxopenSUSEA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 HighMozillaFirefoxopenSUSEOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 HighMozillaFirefoxopenSUSEWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 MediumMozillaFirefoxopenSUSEA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 CriticalMozillaFirefoxopenSUSEA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 CriticalMozillaFirefoxopenSUSEUse after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 HighMozillaFirefoxopenSUSEIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 HighMozillaFirefoxopenSUSEAn attacker could have sent a message to the parent process where the contents were used to...8.8 HighMozillaFirefoxopenSUSEMozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory...8.8 HighMozillaFirefoxopenSUSEThe Performance API did not properly hide the fact whether a request cross-origin resource has...4.3 MediumMozillaFirefoxopenSUSEMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 CriticalMozillaFirefoxopenSUSEFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 MediumMozillaFirefoxopenSUSEWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 MediumMozillaFirefoxopenSUSERequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 MediumMozillaFirefoxopenSUSEAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 MediumMozillaFirefoxopenSUSEDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing...8.8 HighMozillaFirefoxopenSUSEIn unusual circumstances, selecting text could cause text selection caching to behave incorrectly...6.5 MediumMozillaFirefoxopenSUSESVG's <code><use></code> element could have been used to load unexpected content that could...8.8 HighMozillaFirefoxopenSUSEThe sourceMapURL feature in devtools was missing security checks that would have allowed a...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 HighMozillaFirefoxopenSUSEDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 MediumMozillaFirefoxopenSUSEWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 MediumMozillaFirefoxopenSUSEBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 MediumMozillaFirefoxopenSUSEIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 HighMozillaFirefoxopenSUSEAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 MediumMozillaFirefoxopenSUSE<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 MediumMozillaFirefoxopenSUSEIn unusual circumstances, an individual thread may outlive the thread's manager during shutdown....6.5 Medium- Show moreLoading…