firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEPorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 Highfirefox-esropenSUSEThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Mediumfirefox-esropenSUSEWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 Highfirefox-esropenSUSEA compromised content process could have performed session history manipulations it should not...4.3 Mediumfirefox-esropenSUSEA race condition with requestPointerLock() and setTimeout() could have resulted in a user...3.1 Lowfirefox-esropenSUSEIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 Highfirefox-esropenSUSEThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Mediumfirefox-esropenSUSEDue to unexpected data type conversions, a use-after-free could have occurred when interacting...8.8 Highfirefox-esropenSUSEBy utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the...6.5 Mediumfirefox-esropenSUSEWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 Highfirefox-esropenSUSEA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed...8.8 Highfirefox-esropenSUSEA malicious extension with the 'search' permission could have installed a new search engine whose...6.5 Mediumfirefox-esropenSUSEIf an attacker is able to alter specific about:config values (for example malware running on the...6.5 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 Highfirefox-esropenSUSEA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Mediumfirefox-esropenSUSEBy causing a transition on a parent node by removing a CSS rule, an invalid property for a marker...6.5 Mediumfirefox-esropenSUSEUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Mediumfirefox-esropenSUSEA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed...8.8 Highfirefox-esropenSUSEFirefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a...5.3 Mediumfirefox-esropenSUSENavigations through the Android-specific `intent` URL scheme could have been misused to escape...7.4 Highfirefox-esropenSUSEAn XSS bug in internal error pages could have led to various spoofing attacks, including other...6.1 Mediumfirefox-esropenSUSEContext-specific code was included in a shared jump table; resulting in assertions being...6.5 Mediumfirefox-esropenSUSEWhen processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the...6.5 Mediumfirefox-esropenSUSEOne phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www...8.8 Highfirefox-esropenSUSEThe DOMParser API did not properly process '<noscript>' elements for escaping. This could be used...6.1 Mediumfirefox-esropenSUSEThe developer page about:memory has a Measure function for exploring what object types the...6.5 Mediumfirefox-esropenSUSEWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...8.1 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 Highfirefox-esropenSUSEWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Mediumfirefox-esropenSUSEAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Mediumfirefox-esropenSUSEIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 Highfirefox-esropenSUSEWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 Mediumfirefox-esropenSUSEIncorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a...8.8 Highfirefox-esropenSUSEFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 Highfirefox-esropenSUSEPerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 Highfirefox-esropenSUSEThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 Mediumfirefox-esropenSUSEAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 Mediumfirefox-esropenSUSEThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 Mediumfirefox-esropenSUSEUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 Highfirefox-esropenSUSEIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Mediumfirefox-esropenSUSEWhen a malicious application installed on the user's device broadcast an Intent to Firefox for...6.5 Mediumfirefox-esropenSUSEBy attempting to connect a website using an unresponsive port, an attacker could have controlled...6.5 Mediumfirefox-esropenSUSEUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 High- Show moreLoading…