MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEAn attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be...8.8 HighMozillaFirefoxopenSUSEPotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 HighMozillaFirefoxopenSUSEBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 HighMozillaFirefoxopenSUSEA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 MediumMozillaFirefoxopenSUSERepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 MediumMozillaFirefoxopenSUSEVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 MediumMozillaFirefoxopenSUSETruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 MediumMozillaFirefoxopenSUSEIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 MediumMozillaFirefoxopenSUSEThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 MediumMozillaFirefoxopenSUSEAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 HighMozillaFirefoxopenSUSEA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 HighMozillaFirefoxopenSUSEInappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723...7.8 HighMozillaFirefoxopenSUSEWhen manipulating the selection node cache, an attacker may have been able to cause unexpected...6.5 MediumMozillaFirefoxopenSUSEAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 HighMozillaFirefoxopenSUSEA specially crafted filename containing a large number of spaces could obscure the file's...5.3 MediumMozillaFirefoxopenSUSEA user who enables full-screen mode on a specially crafted web page could potentially be...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 CriticalMozillaFirefoxopenSUSEA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 HighMozillaFirefoxopenSUSEA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 HighMozillaFirefoxopenSUSEBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 MediumMozillaFirefoxopenSUSEA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 MediumMozillaFirefoxopenSUSEIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 HighMozillaFirefoxopenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighMozillaFirefoxopenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 HighMozillaFirefoxopenSUSEA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 CriticalMozillaFirefoxopenSUSEAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 HighMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMultiple prompts and panels from both Firefox and the Android OS could be used to obscure the...5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 CriticalMozillaFirefoxopenSUSEIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 MediumMozillaFirefoxopenSUSEA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 CriticalMozillaFirefoxopenSUSEThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 CriticalMozillaFirefoxopenSUSEFirefox normally asks for confirmation before asking the operating system to find an application...7.5 HighMozillaFirefoxopenSUSEInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 HighMozillaFirefoxopenSUSEA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 CriticalMozillaFirefoxopenSUSEIncorrect garbage collection interaction could have led to a use-after-free. This vulnerability...8.8 HighMozillaFirefoxopenSUSECalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 MediumMozillaFirefoxopenSUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 MediumMozillaFirefoxopenSUSEA select option could partially obscure security prompts. This could be used by a malicious site...8.1 HighMozillaFirefoxopenSUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 HighMozillaFirefoxopenSUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 HighMozillaFirefoxopenSUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 MediumMozillaFirefoxopenSUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 HighMozillaFirefoxopenSUSEFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 MediumMozillaFirefoxopenSUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 HighMozillaFirefoxopenSUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 HighMozillaFirefoxopenSUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 High- Show moreLoading…