MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSESometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 MediumMozillaFirefoxopenSUSEUnder certain circumstances, a ServiceWorker's offline cache may have leaked to the file system...4.3 MediumMozillaFirefoxopenSUSEAndroid applications with unpatched vulnerabilities can be launched from a browser using Intents,...4.3 MediumMozillaFirefoxopenSUSEBy displaying a prompt with a long description, the fullscreen notification could have been...4.3 MediumMozillaFirefoxopenSUSEMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 MediumMozillaFirefoxopenSUSEAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 HighMozillaFirefoxopenSUSEA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 HighMozillaFirefoxopenSUSEMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...8.8 HighMozillaFirefoxopenSUSEMozilla developers Timothy Nikkel, Gabriele Svelto, Jeff Muizelaar and the Mozilla Fuzzing Team...8.8 HighMozillaFirefoxopenSUSEMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 HighMozillaFirefoxopenSUSEWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 MediumMozillaFirefoxopenSUSEWhen dragging and dropping an image cross-origin, the image's size could potentially be leaked....6.5 MediumMozillaFirefoxopenSUSEModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 HighMozillaFirefoxopenSUSEAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 HighMozillaFirefoxopenSUSEAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior....9.8 CriticalMozillaFirefoxopenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 HighMozillaFirefoxopenSUSEThe return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have...7.5 HighMozillaFirefoxopenSUSEWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 HighMozillaFirefoxopenSUSEDue to URL previews in the network panel of developer tools improperly storing URLs, query...8.8 HighMozillaFirefoxopenSUSEA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 MediumMozillaFirefoxopenSUSEPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 HighMozillaFirefoxopenSUSEThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 MediumMozillaFirefoxopenSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 1098.8 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 HighMozillaFirefoxopenSUSECreation of duplicate SystemPrincipal from less secure contexts6.5 MediumMozillaFirefoxopenSUSECalls to console.log allowed bypassing Content Security Policy via format directive6.5 MediumMozillaFirefoxopenSUSEContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 MediumMozillaFirefoxopenSUSEURL being dragged from cross-origin iframe into same tab triggers navigation6.5 MediumMozillaFirefoxopenSUSEMalicious command could be hidden in devtools output on Windows6.5 MediumMozillaFirefoxopenSUSEArbitrary file read from GTK drag and drop on Linux6.5 MediumMozillaFirefoxopenSUSELogic bug in process allocation allowed to read arbitrary files6.5 MediumMozillaFirefoxopenSUSEDuring startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow...6.5 MediumMozillaFirefoxopenSUSEA website that had permission to access the microphone could record audio without the audio...4.3 MediumMozillaFirefoxopenSUSEWhen visiting a website with an overly long URL, the user interface would start to hang. Due to...6.5 MediumMozillaFirefoxopenSUSEWhen closed or sent to the background, Firefox for Android would not properly record and persist...6.1 MediumMozillaFirefoxopenSUSEUnder certain circumstances, a JavaScript alert (or prompt) could have been shown while another...4.3 MediumMozillaFirefoxopenSUSEWhen clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be...8.8 HighMozillaFirefoxopenSUSEBy generally accepting and passing resource handles across processes, a compromised content...6.5 MediumMozillaFirefoxopenSUSEWhen scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do...4.3 MediumMozillaFirefoxopenSUSEIf Firefox was installed to a world-writable directory, a local privilege escalation could occur...7.0 HighMozillaFirefoxopenSUSEMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the...8.8 HighMozillaFirefoxopenSUSEBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 MediumMozillaFirefoxopenSUSEBecause Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who...8.8 HighMozillaFirefoxopenSUSEAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 HighMozillaFirefoxopenSUSEA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 CriticalMozillaFirefoxopenSUSEAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 HighMozillaFirefoxopenSUSEA missing check related to tex units could have led to a use-after-free and potentially...6.5 MediumMozillaFirefoxopenSUSEMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 HighMozillaFirefoxopenSUSEThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 Medium- Show moreLoading…