firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 Highfirefox-esropenSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 Highfirefox-esropenSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 Highfirefox-esropenSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalfirefox-esropenSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highfirefox-esropenSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highfirefox-esropenSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Mediumfirefox-esropenSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Mediumfirefox-esropenSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Mediumfirefox-esropenSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highfirefox-esropenSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediumfirefox-esropenSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowfirefox-esropenSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediumfirefox-esropenSUSEA compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS)...6.1 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highfirefox-esropenSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Mediumfirefox-esropenSUSEIf a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any...5.3 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68. Some...9.8 Criticalfirefox-esropenSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 Criticalfirefox-esropenSUSEOut of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.1 Highfirefox-esropenSUSEA hyperlink using the res: protocol can be used to open local files at a known location in...6.5 Mediumfirefox-esropenSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highfirefox-esropenSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumfirefox-esropenSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highfirefox-esropenSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediumfirefox-esropenSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediumfirefox-esropenSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediumfirefox-esropenSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediumfirefox-esropenSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highfirefox-esropenSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediumfirefox-esropenSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediumfirefox-esropenSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highfirefox-esropenSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Mediumfirefox-esropenSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumfirefox-esropenSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 Highfirefox-esropenSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediumfirefox-esropenSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalfirefox-esropenSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highfirefox-esropenSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalfirefox-esropenSUSEInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 Criticalfirefox-esropenSUSEA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highfirefox-esropenSUSEA race condition is present in the crash generation server used to generate data for the crash...8.3 Highfirefox-esropenSUSEIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 Highfirefox-esropenSUSEA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 High- Show moreLoading…