MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 HighMozillaFirefoxopenSUSEWhen recording the screen while in Private Browsing on Firefox for Android the address bar and...6.5 MediumMozillaFirefoxopenSUSEDifferent techniques existed to obscure the fullscreen notification in Firefox and Focus for...9.1 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 CriticalMozillaFirefoxopenSUSEWhen choosing a site-isolated process for a document loaded from a data: URL that was the result...6.1 MediumMozillaFirefoxopenSUSEThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 LowMozillaFirefoxopenSUSEAfter downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could...8.8 HighMozillaFirefoxopenSUSENotification permissions persisted between Normal and Private Browsing on Android6.5 MediumMozillaFirefoxopenSUSEProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 HighMozillaFirefoxopenSUSEWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 HighMozillaFirefoxopenSUSEAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 MediumMozillaFirefoxopenSUSEA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 MediumMozillaFirefoxopenSUSEDocuments were incorrectly assuming an ordering of principal objects when ensuring we were...6.5 MediumMozillaFirefoxopenSUSEA maliciously crafted favicon could have led to an out of memory crash. This vulnerability...7.5 HighMozillaFirefoxopenSUSEService workers could reveal script base URL due to dynamic `import()`. This vulnerability...5.3 MediumMozillaFirefoxopenSUSEA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 HighMozillaFirefoxopenSUSEAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 MediumMozillaFirefoxopenSUSEIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 MediumMozillaFirefoxopenSUSEMozilla developers Randell Jesup, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team...8.8 HighMozillaFirefoxopenSUSEUnder certain circumstances, a call to the <code>bind</code> function may have resulted in the...6.5 MediumMozillaFirefoxopenSUSEWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain...6.5 MediumMozillaFirefoxopenSUSEIf multiple instances of resource exhaustion occurred at the incorrect time, the garbage...6.5 MediumMozillaFirefoxopenSUSEAn attacker could have caused memory corruption and a potentially exploitable use-after-free of a...8.8 HighMozillaFirefoxopenSUSEUsing a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to...6.1 MediumMozillaFirefoxopenSUSEUnder specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI...4.3 MediumMozillaFirefoxopenSUSEMultiple race conditions in the font initialization could have led to memory corruption and...7.5 HighMozillaFirefoxopenSUSEMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 HighMozillaFirefoxopenSUSEA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 MediumMozillaFirefoxopenSUSESimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 MediumMozillaFirefoxopenSUSEA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 CriticalMozillaFirefoxopenSUSEFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 HighMozillaFirefoxopenSUSEWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 HighMozillaFirefoxopenSUSEAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 HighMozillaFirefoxopenSUSEFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 MediumMozillaFirefoxopenSUSEA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 MediumMozillaFirefoxopenSUSEA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 MediumMozillaFirefoxopenSUSEAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 CriticalMozillaFirefoxopenSUSEUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and...8.8 HighMozillaFirefoxopenSUSEMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 HighMozillaFirefoxopenSUSEDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 MediumMozillaFirefoxopenSUSEWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 MediumMozillaFirefoxopenSUSEWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 HighMozillaFirefoxopenSUSEIf temporary "one-time" permissions, such as the ability to use the Camera, were granted to a...8.8 HighMozillaFirefoxopenSUSEWhen following a redirect to a publicly accessible web extension file, the URL may have been...6.5 MediumMozillaFirefoxopenSUSEThe fullscreen notification could have been hidden on Firefox for Android by using download...4.3 MediumMozillaFirefoxopenSUSEWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Medium- Show moreLoading…