firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 Highfirefox-esropenSUSEUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 Highfirefox-esropenSUSEUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 Highfirefox-esropenSUSEMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...9.8 Criticalfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Criticalfirefox-esropenSUSEWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 Mediumfirefox-esropenSUSEThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Mediumfirefox-esropenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 Highfirefox-esropenSUSEAfter a website had entered fullscreen mode, it could have used a previously opened popup to...4.3 Mediumfirefox-esropenSUSEWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...6.5 Mediumfirefox-esropenSUSEWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 Highfirefox-esropenSUSEBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 Highfirefox-esropenSUSEWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 Highfirefox-esropenSUSEWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...7.5 Highfirefox-esropenSUSEusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Mediumfirefox-esropenSUSECommand line arguments could have been injected during Firefox invocation as a shell handler for...8.8 Highfirefox-esropenSUSEBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 Highfirefox-esropenSUSEIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Mediumfirefox-esropenSUSEA content process could have modified shared memory relating to crash reporting information,...8.8 Highfirefox-esropenSUSEIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 Highfirefox-esropenSUSEAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...6.5 Mediumfirefox-esropenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esropenSUSEIf an XML file is served with a Content Security Policy and the XML file includes an XSL...6.5 Mediumfirefox-esropenSUSEDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 Highfirefox-esropenSUSEWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumfirefox-esropenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Mediumfirefox-esropenSUSEIf an image had not loaded correctly (such as when it is not actually an image), it could be...7.4 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highfirefox-esropenSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highfirefox-esropenSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highfirefox-esropenSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highfirefox-esropenSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highfirefox-esropenSUSEImproper refcounting of soft token session objects could cause a use-after-free and crash (likely...8.8 Highfirefox-esropenSUSEIf upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged...4.3 Mediumfirefox-esropenSUSEA Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to...6.1 Mediumfirefox-esropenSUSEAn object tag with a data URI did not correctly inherit the document's Content Security Policy....6.1 Mediumfirefox-esropenSUSEA compromised content process could send a message to the parent process that would cause the ...6.5 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highfirefox-esropenSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediumfirefox-esropenSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediumfirefox-esropenSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediumfirefox-esropenSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highfirefox-esropenSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highfirefox-esropenSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highfirefox-esropenSUSEWhen the pointer lock is enabled by a website though requestPointerLock(), no user notification...4.3 Medium- Show moreLoading…