MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 HighMozillaFirefoxopenSUSEAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 HighMozillaFirefoxopenSUSEMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 HighMozillaFirefoxopenSUSEUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 MediumMozillaFirefoxopenSUSEIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS...6.5 MediumMozillaFirefoxopenSUSEIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 MediumMozillaFirefoxopenSUSEService Workers did not detect Private Browsing Mode correctly in all cases, which could have led...4.3 MediumMozillaFirefoxopenSUSEKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 MediumMozillaFirefoxopenSUSEWhen downloading an HTML file, if the title of the page was formatted as a filename with a...7.8 HighMozillaFirefoxopenSUSEUsing the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a...6.1 MediumMozillaFirefoxopenSUSEWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 HighMozillaFirefoxopenSUSECross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 MediumMozillaFirefoxopenSUSEWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 MediumMozillaFirefoxopenSUSEThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 HighMozillaFirefoxopenSUSEThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 MediumMozillaFirefoxopenSUSEIf an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after...7.5 HighMozillaFirefoxopenSUSEIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 CriticalMozillaFirefoxopenSUSEFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 MediumMozillaFirefoxopenSUSEThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 MediumMozillaFirefoxopenSUSEService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 MediumMozillaFirefoxopenSUSELogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 LowMozillaFirefoxopenSUSEIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 HighMozillaFirefoxopenSUSEMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxopenSUSEIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 MediumMozillaFirefoxopenSUSECertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 HighMozillaFirefoxopenSUSEA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 HighMozillaFirefoxopenSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 MediumMozillaFirefoxopenSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 HighMozillaFirefoxopenSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 MediumMozillaFirefoxopenSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 MediumMozillaFirefoxopenSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 MediumMozillaFirefoxopenSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 MediumMozillaFirefoxopenSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 MediumMozillaFirefoxopenSUSEWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 HighMozillaFirefoxopenSUSElibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 HighMozillaFirefoxopenSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 HighMozillaFirefoxopenSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxopenSUSEA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 HighMozillaFirefoxopenSUSEAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 MediumMozillaFirefoxopenSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 HighMozillaFirefoxopenSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 HighMozillaFirefoxopenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...9.8 CriticalMozillaFirefoxopenSUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 HighMozillaFirefoxopenSUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 MediumMozillaFirefoxopenSUSEWhen using the Performance API, an attacker was able to notice subtle differences between...6.1 MediumMozillaFirefoxopenSUSEWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 MediumMozillaFirefoxopenSUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 MediumMozillaFirefoxopenSUSEMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 CriticalMozillaFirefoxopenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 High- Show moreLoading…