firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEUse-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not...8.1 Highfirefox-esropenSUSEEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Mediumfirefox-esropenSUSEA buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later...7.5 Highfirefox-esropenSUSEMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEThe Mozilla Updater can be made to choose an arbitrary target working directory for output files...5.5 Mediumfirefox-esropenSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 Highfirefox-esropenSUSERedirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the ...8.8 Highfirefox-esropenSUSEWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 Highfirefox-esropenSUSECanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 Highfirefox-esropenSUSEAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 Mediumfirefox-esropenSUSEAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 Criticalfirefox-esropenSUSEContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 Mediumfirefox-esropenSUSEA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 Highfirefox-esropenSUSEA use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially...7.8 Highfirefox-esropenSUSEA use-after-free during web animations when working with timelines resulting in a potentially...7.5 Highfirefox-esropenSUSETwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 Mediumfirefox-esropenSUSEAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 Criticalfirefox-esropenSUSEDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 Mediumfirefox-esropenSUSEMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 Mediumfirefox-esropenSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 Highfirefox-esropenSUSEAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Mediumfirefox-esropenSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Criticalfirefox-esropenSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 Highfirefox-esropenSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Mediumfirefox-esropenSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSEWeb content could access information in the HTTP cache if e10s is disabled. This can reveal some...5.9 Mediumfirefox-esropenSUSEA potentially exploitable use-after-free crash during actor destruction with service workers....9.8 Criticalfirefox-esropenSUSEMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 Highfirefox-esropenSUSEMozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a...8.8 Highfirefox-esropenSUSEMozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which...6.5 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 Criticalfirefox-esropenSUSEUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 Criticalfirefox-esropenSUSEMozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full...4.3 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Criticalfirefox-esropenSUSEUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 Criticalfirefox-esropenSUSEBuffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 Criticalfirefox-esropenSUSEThe mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility...8.8 Highfirefox-esropenSUSEThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 Highfirefox-esropenSUSEThe PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote...6.5 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 Criticalfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 Criticalfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...9.8 Criticalfirefox-esropenSUSEThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...6.5 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 Criticalfirefox-esropenSUSEMozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left...5.3 Mediumfirefox-esropenSUSEThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...4.7 Medium- Show moreLoading…