firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 Mediumfirefox-esropenSUSEDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Mediumfirefox-esropenSUSEWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 Mediumfirefox-esropenSUSEFirefox could be made to load attacker-supplied DLL files from the installation directory. This...7.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 Highfirefox-esropenSUSEThe code for downloading files did not properly take care of special characters, which led to an...6.5 Mediumfirefox-esropenSUSEJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 Highfirefox-esropenSUSEA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 Mediumfirefox-esropenSUSEWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Mediumfirefox-esropenSUSEAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Mediumfirefox-esropenSUSEBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Mediumfirefox-esropenSUSEInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Mediumfirefox-esropenSUSEWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 Highfirefox-esropenSUSEDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Mediumfirefox-esropenSUSEWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Mediumfirefox-esropenSUSEIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 Highfirefox-esropenSUSEWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Mediumfirefox-esropenSUSEWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 Highfirefox-esropenSUSEWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 Highfirefox-esropenSUSEManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Mediumfirefox-esropenSUSEDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 Highfirefox-esropenSUSEA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 Highfirefox-esropenSUSEWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...6.5 Mediumfirefox-esropenSUSEUndefined Behavior in bounded Crossbeam channel8.1 Highfirefox-esropenSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 Highfirefox-esropenSUSEWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 Highfirefox-esropenSUSEWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Mediumfirefox-esropenSUSEMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 Mediumfirefox-esropenSUSEMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 Highfirefox-esropenSUSEWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Mediumfirefox-esropenSUSENSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 Mediumfirefox-esropenSUSEUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 Highfirefox-esropenSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalfirefox-esropenSUSEThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 Criticalfirefox-esropenSUSEA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 Lowfirefox-esropenSUSEDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 Highfirefox-esropenSUSEIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 Criticalfirefox-esropenSUSEA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Criticalfirefox-esropenSUSEThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Mediumfirefox-esropenSUSEA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 Highfirefox-esropenSUSEMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Criticalfirefox-esropenSUSEInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 Lowfirefox-esropenSUSEA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 Criticalfirefox-esropenSUSEOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 High- Show moreLoading…