firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Criticalfirefox-esropenSUSEA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Criticalfirefox-esropenSUSEImages from a different domain can be read using a canvas object in some circumstances. This...5.3 Mediumfirefox-esropenSUSEA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66. Some...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 Criticalfirefox-esropenSUSEThe default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS...6.1 Mediumfirefox-esropenSUSEA malicious page can briefly cause the wrong name to be highlighted as the domain name in the...6.5 Mediumfirefox-esropenSUSEIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 Mediumfirefox-esropenSUSEIf the ALT and "a" keys are pressed when users receive an extension installation prompt, the...6.5 Mediumfirefox-esropenSUSEFiles with the .JNLP extension used for "Java web start" applications are not treated as...7.8 Highfirefox-esropenSUSEA custom cursor defined by scripting on a site can position itself over the addressbar to spoof...4.3 Mediumfirefox-esropenSUSEThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 Criticalfirefox-esropenSUSEIn Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command...9.8 Criticalfirefox-esropenSUSEOn Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users...7.4 Highfirefox-esropenSUSEFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 Mediumfirefox-esropenSUSEA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 Criticalfirefox-esropenSUSEIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 Highfirefox-esropenSUSEIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 Highfirefox-esropenSUSEIf the source for resources on a page is through an FTP connection, it is possible to trigger a...7.5 Highfirefox-esropenSUSEIf WebRTC permission is requested from documents with data: or blob: URLs, the permission...5.3 Mediumfirefox-esropenSUSEWhen arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible...4.3 Mediumfirefox-esropenSUSEA vulnerability exists during authorization prompting for FTP transaction where successive modal...7.5 Highfirefox-esropenSUSEA latent vulnerability exists in the Prio library where data may be read from uninitialized...9.8 Criticalfirefox-esropenSUSEThe Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content...7.4 Highfirefox-esropenSUSEIf a Sandbox content process is compromised, it can initiate an FTP download which will then use...7.5 Highfirefox-esropenSUSEInsufficient bounds checking of data during inter-process communication might allow a compromised...7.5 Highfirefox-esropenSUSECross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Criticalfirefox-esropenSUSEA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Criticalfirefox-esropenSUSEA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Mediumfirefox-esropenSUSEThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 Criticalfirefox-esropenSUSEThe type inference system allows the compilation of functions that can cause type confusions...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65. Some...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Criticalfirefox-esropenSUSEWhen the RSS Feed preview about:feeds page is framed within another page, it can be used in...8.8 Highfirefox-esropenSUSEIn private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as...5.3 Mediumfirefox-esropenSUSEIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 Mediumfirefox-esropenSUSEpng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 Mediumfirefox-esropenSUSEWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 Mediumfirefox-esropenSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 Criticalfirefox-esropenSUSEA crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is...9.8 Criticalfirefox-esropenSUSEWhen JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash...8.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64. Some...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Criticalfirefox-esropenSUSECross-origin images can be read from a canvas element in violation of the same-origin policy...4.3 Medium- Show moreLoading…