MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...9.8 CriticalMozillaFirefoxopenSUSEIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...7.5 HighMozillaFirefoxopenSUSEA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...9.8 CriticalMozillaFirefoxopenSUSEIn canvas rendering, a compromised content process could have caused a surface to change...7.4 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 CriticalMozillaFirefoxopenSUSEIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 CriticalMozillaFirefoxopenSUSEDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 MediumMozillaFirefoxopenSUSEA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 MediumMozillaFirefoxopenSUSEA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...9.8 CriticalMozillaFirefoxopenSUSEDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighMozillaFirefoxopenSUSEBuffer Overflow in WebGL glGetProgramiv8.8 HighMozillaFirefoxopenSUSEInteger Overflow in RecordedSourceSurfaceCreation8.6 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 HighMozillaFirefoxopenSUSEBrowsing Context potentially not cleared when closing Private Window7.5 HighMozillaFirefoxopenSUSEXLL file extensions were downloadable without warnings4.3 MediumMozillaFirefoxopenSUSEPush notifications saved to disk unencrypted6.5 MediumMozillaFirefoxopenSUSEPersisted search terms were formatted as URLs3.1 LowMozillaFirefoxopenSUSEError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 MediumMozillaFirefoxopenSUSEMemory corruption in JIT UpdateRegExpStatics6.5 MediumMozillaFirefoxopenSUSEMemory corruption in IPC FilePickerShownCallback6.5 MediumMozillaFirefoxopenSUSEMemory corruption in IPC ColorPickerShownCallback6.5 MediumMozillaFirefoxopenSUSEMemory corruption in IPC CanvasTranslator6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 CriticalMozillaFirefoxopenSUSEWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 HighMozillaFirefoxopenSUSEWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 MediumMozillaFirefoxopenSUSEThe Firefox updater created a directory writable by non-privileged users. When uninstalling...6.5 MediumMozillaFirefoxopenSUSEFull screen notification obscured by external program6.5 MediumMozillaFirefoxopenSUSEFull screen notification obscured by file open dialog7.5 HighMozillaFirefoxopenSUSEIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 HighMozillaFirefoxopenSUSERace conditions in reference counting code were found through code inspection. These could have...5.9 MediumMozillaFirefoxopenSUSEAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 HighMozillaFirefoxopenSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaFirefoxopenSUSEIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 MediumMozillaFirefoxopenSUSEOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 MediumMozillaFirefoxopenSUSEUse-after-free in workers8.8 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 HighMozillaFirefoxopenSUSEA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 MediumMozillaFirefoxopenSUSEA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 HighMozillaFirefoxopenSUSEUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 MediumMozillaFirefoxopenSUSEThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 MediumMozillaFirefoxopenSUSEA website could have obscured the fullscreen notification by using an option element by...6.5 MediumMozillaFirefoxopenSUSEInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 HighMozillaFirefoxopenSUSEWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 HighMozillaFirefoxopenSUSEWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 HighMozillaFirefoxopenSUSEA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 MediumMozillaFirefoxopenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 High- Show moreLoading…