firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 Criticalfirefox-esropenSUSELimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...6.5 Mediumfirefox-esropenSUSEWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...6.5 Mediumfirefox-esropenSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 Mediumfirefox-esropenSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 Criticalfirefox-esropenSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...8.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 Criticalfirefox-esropenSUSEAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...8.8 Highfirefox-esropenSUSEDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...8.8 Highfirefox-esropenSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 Highfirefox-esropenSUSEIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...5.3 Mediumfirefox-esropenSUSEThe internal WebBrowserPersist code does not use correct origin context for a resource being...6.5 Mediumfirefox-esropenSUSESome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...7.5 Highfirefox-esropenSUSEWhen a new protocol handler is registered, the API accepts a title argument which can be used to...4.3 Mediumfirefox-esropenSUSEBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...6.5 Mediumfirefox-esropenSUSEA WebExtension can request access to local files without the warning prompt stating that the...7.1 Highfirefox-esropenSUSEA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 Mediumfirefox-esropenSUSEBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 Highfirefox-esropenSUSEA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 Highfirefox-esropenSUSEWhen manipulating user events in nested loops while opening a document through script, it is...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...8.8 Highfirefox-esropenSUSEThe displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in...5.3 Mediumfirefox-esropenSUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 Criticalfirefox-esropenSUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 Highfirefox-esropenSUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 Mediumfirefox-esropenSUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 Highfirefox-esropenSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 Highfirefox-esropenSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...8.8 Highfirefox-esropenSUSEIncorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a...8.8 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...9.8 Criticalfirefox-esropenSUSEA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 Criticalfirefox-esropenSUSEAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 Highfirefox-esropenSUSEIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...8.8 Highfirefox-esropenSUSEWebExtensions bundled with embedded experiments were not correctly checked for proper...9.8 Criticalfirefox-esropenSUSEIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 Mediumfirefox-esropenSUSEAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 Mediumfirefox-esropenSUSEA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 Mediumfirefox-esropenSUSENPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 Highfirefox-esropenSUSEAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 Highfirefox-esropenSUSEAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 High- Show moreLoading…