firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Mediumfirefox-esropenSUSEWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 Mediumfirefox-esropenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Mediumfirefox-esropenSUSEWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Mediumfirefox-esropenSUSEWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 Highfirefox-esropenSUSECertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 Highfirefox-esropenSUSEThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 Criticalfirefox-esropenSUSECertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 Highfirefox-esropenSUSEIf the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version...6.8 Mediumfirefox-esropenSUSEOneCRL was non-functional in the new Firefox for Android due to a missing service initialization....6.5 Mediumfirefox-esropenSUSEWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 Mediumfirefox-esropenSUSEWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...4.3 Mediumfirefox-esropenSUSEUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Mediumfirefox-esropenSUSESearching for a single word from the address bar caused an mDNS request to be sent on the local...6.5 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 Highfirefox-esropenSUSEWhen listening for page changes with a Mutation Observer, a malicious web page could confuse...6.5 Mediumfirefox-esropenSUSESome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Mediumfirefox-esropenSUSERepeated calls to the history and location interfaces could have been used to hang the browser....4.3 Mediumfirefox-esropenSUSECross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 Mediumfirefox-esropenSUSEWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Mediumfirefox-esropenSUSEIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 Highfirefox-esropenSUSEDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 Highfirefox-esropenSUSEFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Mediumfirefox-esropenSUSEIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Mediumfirefox-esropenSUSEIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Mediumfirefox-esropenSUSEIncorrect bookkeeping of functions inlined during JIT compilation could have led to memory...8.8 Highfirefox-esropenSUSEA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Mediumfirefox-esropenSUSESide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Mediumfirefox-esropenSUSEIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSEWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 Mediumfirefox-esropenSUSEWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 Highfirefox-esropenSUSEIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Criticalfirefox-esropenSUSEHeap buffer overflow in CefSharp9.6 Criticalfirefox-esropenSUSEUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 Highfirefox-esropenSUSEWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 Highfirefox-esropenSUSEBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Mediumfirefox-esropenSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediumfirefox-esropenSUSEWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highfirefox-esropenSUSEIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 Highfirefox-esropenSUSEA lock was missing when accessing a data structure and importing certificate information into the...4.3 Mediumfirefox-esropenSUSEWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Mediumfirefox-esropenSUSEFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 Mediumfirefox-esropenSUSEBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Medium- Show moreLoading…