firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 Highfirefox-esropenSUSEA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 Highfirefox-esropenSUSEService workers can use redirection to avoid the tainting of cross-origin resources in some...4.3 Mediumfirefox-esropenSUSEIn 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected...5.3 Mediumfirefox-esropenSUSEA spoofing vulnerability can occur when a malicious site with an extremely long domain name is...5.3 Mediumfirefox-esropenSUSELow descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in...5.3 Mediumfirefox-esropenSUSEIf cursor visibility is toggled by script using from 'none' to an image and back through script,...5.3 Mediumfirefox-esropenSUSEA combination of an external SVG image referenced on a page and the coloring of anchor links...6.5 Mediumfirefox-esropenSUSEThe "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of...7.8 Highfirefox-esropenSUSEA spoofing vulnerability can occur when a page switches to fullscreen mode without user...5.3 Mediumfirefox-esropenSUSEOn Windows systems, the logger run by the Windows updater deletes the file "update.log" before it...4.7 Mediumfirefox-esropenSUSEOn Windows systems, if non-null-terminated strings are copied into the crash reporter for some...7.5 Highfirefox-esropenSUSEMalicious sites can display a spoofed location bar on a subsequently loaded page when the...4.3 Mediumfirefox-esropenSUSEA location bar spoofing attack where the location bar of loaded page will be shown over the...8.8 Highfirefox-esropenSUSEWeak proxy objects have weak references on multiple threads when they should only have them on...9.8 Criticalfirefox-esropenSUSEWhen a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit...7.5 Highfirefox-esropenSUSEThe location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode,...7.5 Highfirefox-esropenSUSEPrivate browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db...3.3 Lowfirefox-esropenSUSEA previously installed malicious Android application which defines a specific signature-level...7.5 Highfirefox-esropenSUSEA previously installed malicious Android application with same signature-level permissions as...7.5 Highfirefox-esropenSUSEA mechanism where disruption of the loading of a new web page can cause the previous page's...6.5 Mediumfirefox-esropenSUSEThis vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate...7.8 Highfirefox-esropenSUSEWhen the Mozilla Updater is run, if the Updater's log file in the working directory points to a...5.5 Mediumfirefox-esropenSUSEA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...7.5 Highfirefox-esropenSUSEIf a text string that happens to be a filename in the operating system's native format is dragged...7.5 Highfirefox-esropenSUSEIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur during WebGL operations. While this results in a...7.5 Highfirefox-esropenSUSEA vulnerability exists in XSLT during number formatting where a negative buffer size may be...7.5 Highfirefox-esropenSUSEThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...6.1 Mediumfirefox-esropenSUSEA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...6.1 Mediumfirefox-esropenSUSEThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...5.3 Mediumfirefox-esropenSUSEThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...4.3 Mediumfirefox-esropenSUSEIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...6.5 Mediumfirefox-esropenSUSEThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...4.3 Mediumfirefox-esropenSUSEWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...7.5 Highfirefox-esropenSUSEContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...6.1 Mediumfirefox-esropenSUSEIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 Highfirefox-esropenSUSEWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 Highfirefox-esropenSUSEIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 Highfirefox-esropenSUSEWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 Mediumfirefox-esropenSUSEMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSESites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 Mediumfirefox-esropenSUSEAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Criticalfirefox-esropenSUSEMalicious PDF can inject JavaScript into PDF Viewer8.8 Highfirefox-esropenSUSESame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 Critical- Show moreLoading…