MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 HighMozillaFirefoxopenSUSEThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 MediumMozillaFirefoxopenSUSEFirefox for Android opened URLs specified in a link querystring parameter4.3 MediumMozillaFirefoxopenSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 MediumMozillaFirefoxopenSUSEconnect-src Content Security Policy restriction could be bypassed9.1 CriticalMozillaFirefoxopenSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 MediumMozillaFirefoxopenSUSENo warning when opening executable terminal files on macOS8.8 HighMozillaFirefoxopenSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 MediumMozillaFirefoxopenSUSEUse-after-free in FontFaceSet9.8 CriticalMozillaFirefoxopenSUSEInteger overflow in OrderedHashTable9.8 CriticalMozillaFirefoxopenSUSEMemory corruption in canvas surfaces9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 139 and Thunderbird 1397.3 HighMozillaFirefoxopenSUSEDevtools' preview ignored CSP headers6.5 MediumMozillaFirefoxopenSUSESNI was sometimes unencrypted7.5 HighMozillaFirefoxopenSUSEMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 HighMozillaFirefoxopenSUSEClickjacking vulnerability could have led to leaking saved payment card details5.4 MediumMozillaFirefoxopenSUSEScript element events leaked cross-origin resource status4.3 MediumMozillaFirefoxopenSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaFirefoxopenSUSEPotential local code execution in “Copy as cURL” command4.8 MediumMozillaFirefoxopenSUSEError handling for script execution was incorrectly isolated from web content4.3 MediumMozillaFirefoxopenSUSEOut-of-bounds access when optimizing linear sums8.8 HighMozillaFirefoxopenSUSEOut-of-bounds access when resolving Promise objects9.8 CriticalMozillaFirefoxopenSUSEMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 138 and Thunderbird 1386.5 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 HighMozillaFirefoxopenSUSELeaked library paths in Thunderbird for Android5.3 MediumMozillaFirefoxopenSUSEPotential local code execution in "copy as cURL" command5.1 MediumMozillaFirefoxopenSUSECross-site request forgery via storage access API redirects6.5 MediumMozillaFirefoxopenSUSEUnsafe attribute access during XPath parsing4.8 MediumMozillaFirefoxopenSUSESpecially crafted filename could be used to obscure download type6.5 MediumMozillaFirefoxopenSUSEPotential information leakage and privilege escalation in UITour actor7.1 HighMozillaFirefoxopenSUSEPotential local code execution in "copy as cURL" command5.7 MediumMozillaFirefoxopenSUSEProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 CriticalMozillaFirefoxopenSUSEWebGL shader attribute memory corruption in Thunderbird for macOS5.9 MediumMozillaFirefoxopenSUSEPrivilege escalation in Thunderbird Updater8.8 HighMozillaFirefoxopenSUSERace condition in nsHttpTransaction could lead to memory corruption6.5 MediumMozillaFirefoxopenSUSETab title disclosure across pages when using AI chatbot5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 137 and Thunderbird 1378.1 HighMozillaFirefoxopenSUSEOpening local .url files could lead to another file being opened7.7 HighMozillaFirefoxopenSUSELeaking file descriptors from the fork server7.4 HighMozillaFirefoxopenSUSEJIT optimization bug with different stack slot sizes6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 HighMozillaFirefoxopenSUSEURL Bar Spoofing via non-BMP Unicode characters7.3 HighMozillaFirefoxopenSUSEUse-after-free triggered by XSLTProcessor6.5 MediumMozillaFirefoxopenSUSEIncorrect handle could lead to sandbox escapes10.0 CriticalMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 136 and Thunderbird 1368.2 HighMozillaFirefoxopenSUSEDisclosure of uninitialized memory when .toUpperCase() causes string to get longer9.8 CriticalMozillaFirefoxopenSUSELock screen setting bypass in Firefox Focus for Android9.1 CriticalMozillaFirefoxopenSUSEAndroid Intent confirmation prompt tapjacking using Select options7.1 High- Show moreLoading…