firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 Criticalfirefox-esropenSUSEAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 Highfirefox-esropenSUSEURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...6.1 Mediumfirefox-esropenSUSEIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...5.3 Mediumfirefox-esropenSUSEA vulnerability in the notifications Push API where notifications can be sent through service...8.2 Highfirefox-esropenSUSEImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...5.3 Mediumfirefox-esropenSUSEA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...7.5 Highfirefox-esropenSUSEA shared worker created from a "data:" URL in one tab can be shared by another tab with a...7.5 Highfirefox-esropenSUSEWebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs...7.5 Highfirefox-esropenSUSEWebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content...7.5 Highfirefox-esropenSUSEIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...6.5 Mediumfirefox-esropenSUSEThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...6.5 Mediumfirefox-esropenSUSEUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 Mediumfirefox-esropenSUSEWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 Highfirefox-esropenSUSEA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...9.8 Criticalfirefox-esropenSUSEA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 Highfirefox-esropenSUSEMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 Highfirefox-esropenSUSEA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...9.8 Criticalfirefox-esropenSUSEThe reader view will display cross-origin content when CORS headers are set to prohibit the...5.3 Mediumfirefox-esropenSUSEThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...5.3 Mediumfirefox-esropenSUSEIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Mediumfirefox-esropenSUSEWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...9.8 Criticalfirefox-esropenSUSEIf an HTTP authentication prompt is triggered by a background network request from a page or...7.5 Highfirefox-esropenSUSEIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...5.3 Mediumfirefox-esropenSUSEThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...7.5 Highfirefox-esropenSUSEDevelopment Tools panels of an extension are required to load URLs for the panels as relative...7.5 Highfirefox-esropenSUSEWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...6.5 Mediumfirefox-esropenSUSEAn audio capture session can started under an incorrect origin from the site making the capture...5.3 Mediumfirefox-esropenSUSEA Blob URL can violate origin attribute segregation, allowing it to be accessed from a private...4.3 Mediumfirefox-esropenSUSEThe printing process can bypass local access protections to read files available through symlinks...5.3 Mediumfirefox-esropenSUSEStyle editor traffic in the Developer Tools can be routed through a service worker hosted on a...5.3 Mediumfirefox-esropenSUSEWebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file....7.8 Highfirefox-esropenSUSEA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when manipulating floating "first-letter" style elements...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable"...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Criticalfirefox-esropenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Criticalfirefox-esropenSUSEA heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called...7.5 Highfirefox-esropenSUSEA heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing,...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSEWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 High- Show moreLoading…