MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSETapjacking in Android Custom Tabs using transition animations3.9 LowMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 HighMozillaFirefoxopenSUSEAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 HighMozillaFirefoxopenSUSEClickjacking the registerProtocolHandler info-bar4.3 MediumMozillaFirefoxopenSUSEUnexpected GC during RegExp bailout processing6.5 MediumMozillaFirefoxopenSUSEJIT corruption of WASM i32 return values on 64-bit CPUs7.6 HighMozillaFirefoxopenSUSEInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 HighMozillaFirefoxopenSUSEUse-after-free in WebTransportChild7.5 HighMozillaFirefoxopenSUSEAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 135 and Thunderbird 1359.8 CriticalMozillaFirefoxopenSUSEFullscreen notification not properly displayed4.3 MediumMozillaFirefoxopenSUSEFullscreen notification is not displayed when fullscreen is re-requested5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 CriticalMozillaFirefoxopenSUSECertificate length was not properly checked8.8 HighMozillaFirefoxopenSUSEPotential opening of private browsing tabs in normal browsing windows6.5 MediumMozillaFirefoxopenSUSEUse-after-free during concurrent delazification7.5 HighMozillaFirefoxopenSUSEA bug in WebAssembly code generation could result in a crash8.8 HighMozillaFirefoxopenSUSEUse-after-free in Custom Highlight8.8 HighMozillaFirefoxopenSUSEUse-after-free in XSLT9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 134 and Thunderbird 1349.8 CriticalMozillaFirefoxopenSUSEAddress bar spoofing using an invalid protocol scheme on Firefox for Android6.5 MediumMozillaFirefoxopenSUSELock screen setting bypass in Firefox Focus for Android3.3 LowMozillaFirefoxopenSUSEAddress bar spoofing using an invalid protocol scheme on Firefox for Android5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 MediumMozillaFirefoxopenSUSEMemory corruption when using JavaScript Text Segmentation7.7 HighMozillaFirefoxopenSUSECompartment mismatch when parsing JavaScript JSON module4.0 MediumMozillaFirefoxopenSUSEAlt-Svc ALPN validation failure when redirected4.0 MediumMozillaFirefoxopenSUSEUse-after-free when breaking lines in text5.3 MediumMozillaFirefoxopenSUSEWebChannel APIs susceptible to confused deputy attack5.4 MediumMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxopenSUSEIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 HighMozillaFirefoxopenSUSEMissing thread synchronization primitives could have led to a data race on members of the...6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 HighMozillaFirefoxopenSUSEA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the...6.5 MediumMozillaFirefoxopenSUSE`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was...9.1 CriticalMozillaFirefoxopenSUSEA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 CriticalMozillaFirefoxopenSUSEA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 CriticalMozillaFirefoxopenSUSEWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 HighMozillaFirefoxopenSUSEThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 MediumMozillaFirefoxopenSUSEOn Android, Firefox may have inadvertently allowed viewing saved passwords without the required...5.7 MediumMozillaFirefoxopenSUSEA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 MediumMozillaFirefoxopenSUSECopying sensitive information from Private Browsing tabs on Android, such as passwords, may have...7.5 HighMozillaFirefoxopenSUSEEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 MediumMozillaFirefoxopenSUSEThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 CriticalMozillaFirefoxopenSUSEThe incorrect domain may have been displayed in the address bar during an interrupted navigation...4.3 MediumMozillaFirefoxopenSUSEMalicious websites may have been able to user intent confirmation through tapjacking. This could...8.1 HighMozillaFirefoxopenSUSEAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Medium- Show moreLoading…