MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSESome non-writable Object properties could be modified6.5 MediumMozillaFirefoxopenSUSECross-process information leaked due to malicious IPC messages9.8 CriticalMozillaFirefoxopenSUSEOut of bounds read/write in a privileged process triggered by WebGL textures9.8 CriticalMozillaFirefoxopenSUSEUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 CriticalMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo scoreMozillaFirefoxopenSUSEJIT miscompilation in the JavaScript Engine: JIT component7.5 HighMozillaFirefoxopenSUSESandbox escape due to integer overflow in the Graphics: Canvas2D component8.6 HighMozillaFirefoxopenSUSEInformation disclosure, mitigation bypass in the Privacy component in Firefox for Android7.5 HighMozillaFirefoxopenSUSESpoofing issue in the Site Permissions component8.1 HighMozillaFirefoxopenSUSEMitigation bypass in the Web Compatibility: Tooling component5.4 MediumMozillaFirefoxopenSUSESpoofing issue in the WebAuthn component in Firefox for Android6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 HighMozillaFirefoxopenSUSEInformation disclosure in the Networking: Cache component6.2 MediumMozillaFirefoxopenSUSEInteger overflow in the SVG component8.8 HighMozillaFirefoxopenSUSEIncorrect boundary conditions in the JavaScript: GC component6.5 MediumMozillaFirefoxopenSUSESame-origin policy bypass in the Layout component6.5 MediumMozillaFirefoxopenSUSESandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 HighMozillaFirefoxopenSUSESandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 HighMozillaFirefoxopenSUSElibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 142 and Thunderbird 1429.8 CriticalMozillaFirefoxopenSUSESpoofing issue in the Address Bar component6.5 MediumMozillaFirefoxopenSUSESpoofing issue in the Address Bar component of Firefox Focus for Android6.5 MediumMozillaFirefoxopenSUSEDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 HighMozillaFirefoxopenSUSEUninitialized memory in the JavaScript Engine component6.5 MediumMozillaFirefoxopenSUSESame-origin policy bypass in the Graphics: Canvas2D component8.1 HighMozillaFirefoxopenSUSESandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 CriticalMozillaFirefoxopenSUSESandboxed iframe could start downloads9.8 CriticalMozillaFirefoxopenSUSEIncorrect URL truncation in Firefox for Android5.3 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 141 and Thunderbird 1419.8 CriticalMozillaFirefoxopenSUSEIncorrect URL truncation9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxopenSUSESearch terms persisted in URL bar8.1 HighMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 HighMozillaFirefoxopenSUSEIncorrect JavaScript state machine for generators6.5 MediumMozillaFirefoxopenSUSECSP frame-src was not correctly enforced for paths9.8 CriticalMozillaFirefoxopenSUSEXSLT documents could bypass CSP8.1 HighMozillaFirefoxopenSUSEIncorrect URL stripping in CSP reports9.8 CriticalMozillaFirefoxopenSUSENameless cookies shadow secure cookies9.1 CriticalMozillaFirefoxopenSUSEDNS rebinding circumvents CORS8.1 HighMozillaFirefoxopenSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 HighMozillaFirefoxopenSUSEjavascript: URLs executed on object and embed tags8.1 HighMozillaFirefoxopenSUSELarge branch table could lead to truncated instruction9.8 CriticalMozillaFirefoxopenSUSEJavaScript engine only wrote partial return value to stack6.5 MediumMozillaFirefoxopenSUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 HighMozillaFirefoxopenSUSESave as in Devtools could download files without sanitizing the extension8.1 HighMozillaFirefoxopenSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 MediumMozillaFirefoxopenSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 Critical- Show moreLoading…