firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...4.3 Mediumfirefox-esropenSUSEBy displaying a form validity message in the correct location at the same time as a permission...4.3 Mediumfirefox-esropenSUSEThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...6.5 Mediumfirefox-esropenSUSEThrough a series of navigations, Firefox could have entered fullscreen mode without notification...4.3 Mediumfirefox-esropenSUSEWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...8.8 Highfirefox-esropenSUSEThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...10.0 Criticalfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...8.8 Highfirefox-esropenSUSEDuring process shutdown, a document could have caused a use-after-free of a languages service...7.5 Highfirefox-esropenSUSEThrough use of reportValidity() and window.open(), a plain-text validation message could have...6.5 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...8.8 Highfirefox-esropenSUSEDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...8.8 Highfirefox-esropenSUSEWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...8.8 Highfirefox-esropenSUSEMixed-content checks were unable to analyze opaque origins which led to some mixed content being...6.5 Mediumfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 Highfirefox-esropenSUSEFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 Highfirefox-esropenSUSEFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 Mediumfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 Highfirefox-esropenSUSEFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 Highfirefox-esropenSUSEAfter requesting multiple permissions, and closing the first permission panel, subsequent...6.5 Mediumfirefox-esropenSUSEA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 Highfirefox-esropenSUSEA use-after-free vulnerability in media channels could have led to memory corruption and a...8.8 Highfirefox-esropenSUSEInstruction reordering resulted in a sequence of instructions that would cause an object to be...8.8 Highfirefox-esropenSUSEDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...6.5 Mediumfirefox-esropenSUSEAn issue present in lowering/register allocation could have led to obscure but deterministic...8.8 Highfirefox-esropenSUSEUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...8.8 Highfirefox-esropenSUSEIf a user had granted a permission to a webpage and saved that grant, any webpage running on the...9.8 Criticalfirefox-esropenSUSEPassword autofill was enabled without user interaction on insecure websites on Firefox for...8.8 Highfirefox-esropenSUSEData race in crossbeam-deque9.8 Criticalfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed...8.8 Highfirefox-esropenSUSEThrough a series of DOM manipulations, a message, over which the attacker had control of the text...6.5 Mediumfirefox-esropenSUSEWhen network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings,...4.3 Mediumfirefox-esropenSUSEA use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library....8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 Highfirefox-esropenSUSEA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 Highfirefox-esropenSUSELack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content...6.1 Mediumfirefox-esropenSUSEFirefox for Android would become unstable and hard-to-recover when a website opened too many...4.3 Mediumfirefox-esropenSUSEAddress bar search suggestions in private browsing mode were re-using session data from normal...4.3 Mediumfirefox-esropenSUSEA malicious website that causes an HTTP Authentication dialog to be spawned could trick the built...5.3 Mediumfirefox-esropenSUSEOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 Highfirefox-esropenSUSEMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...8.8 Highfirefox-esropenSUSEWhen styling and rendering an oversized `<select>` element, Firefox did not apply correct...4.3 Mediumfirefox-esropenSUSEFirefox used to cache the last filename used for printing a file. When generating a filename for...4.3 Mediumfirefox-esropenSUSEWhen a user has already allowed a website to access microphone and camera, disabling camera...4.3 Mediumfirefox-esropenSUSEWhen Web Render components were destructed, a race condition could have caused undefined behavior...7.5 Highfirefox-esropenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...8.8 High- Show moreLoading…