MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 HighMozillaFirefoxopenSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 HighMozillaFirefoxopenSUSEA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 MediumMozillaFirefoxopenSUSEWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 MediumMozillaFirefoxopenSUSEA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 MediumMozillaFirefoxopenSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaFirefoxopenSUSEAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...8.8 HighMozillaFirefoxopenSUSEBrowser tab titles were being leaked by GNOME to system logs. This could potentially expose the...6.5 MediumMozillaFirefoxopenSUSEUnder certain conditions, Firefox did not display a warning when a user attempted to navigate to...4.3 MediumMozillaFirefoxopenSUSEApplications which spawn a Toast notification in a background thread may have obscured fullscreen...4.3 MediumMozillaFirefoxopenSUSEA `` element could have been manipulated to paint content outside of a sandboxed iframe. This...6.5 MediumMozillaFirefoxopenSUSEIn some instances, the user-agent would allow push requests which lacked a valid VAPID even...4.3 MediumMozillaFirefoxopenSUSEThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 MediumMozillaFirefoxopenSUSETypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in...8.8 HighMozillaFirefoxopenSUSE`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 MediumMozillaFirefoxopenSUSEMultiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This...4.3 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 HighMozillaFirefoxopenSUSEThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 HighMozillaFirefoxopenSUSEA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 HighMozillaFirefoxopenSUSEThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 HighMozillaFirefoxopenSUSEThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 MediumMozillaFirefoxopenSUSEA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 HighMozillaFirefoxopenSUSEFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 HighMozillaFirefoxopenSUSEWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 MediumMozillaFirefoxopenSUSEThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory...8.8 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 HighMozillaFirefoxopenSUSEIf an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS...6.5 MediumMozillaFirefoxopenSUSEWhen an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly...6.5 MediumMozillaFirefoxopenSUSERelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 MediumMozillaFirefoxopenSUSEWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 HighMozillaFirefoxopenSUSEOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 HighMozillaFirefoxopenSUSEThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 MediumMozillaFirefoxopenSUSEIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 MediumMozillaFirefoxopenSUSEOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 MediumMozillaFirefoxopenSUSEAddress bar spoofing via bidirectional characters6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 CriticalMozillaFirefoxopenSUSEA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....4.3 MediumMozillaFirefoxopenSUSEDuring garbage collection extra operations were performed on a object that should not be. This...7.5 HighMozillaFirefoxopenSUSEThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...6.5 MediumMozillaFirefoxopenSUSEA website could have obscured the full screen notification by using the file open dialog. This...4.3 MediumMozillaFirefoxopenSUSEA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 MediumMozillaFirefoxopenSUSEDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 HighMozillaFirefoxopenSUSEAn attacker with temporary script access to a site could have set a cookie containing invalid...5.3 MediumMozillaFirefoxopenSUSEUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...5.3 MediumMozillaFirefoxopenSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 MediumMozillaFirefoxopenSUSENSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 MediumMozillaFirefoxopenSUSEElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 High- Show moreLoading…