firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 Mediumfirefox-esropenSUSEIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 Highfirefox-esropenSUSE<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 Mediumfirefox-esropenSUSEIn unusual circumstances, an individual thread may outlive the thread's manager during shutdown....6.5 Mediumfirefox-esropenSUSEWhile the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was...4.3 Mediumfirefox-esropenSUSEMozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety...8.8 Highfirefox-esropenSUSEWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 Highfirefox-esropenSUSEIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 Criticalfirefox-esropenSUSEWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 Mediumfirefox-esropenSUSEAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 Highfirefox-esropenSUSERegular expression denial of service in Rust's regex crate7.5 Highfirefox-esropenSUSEA Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...7.1 Highfirefox-esropenSUSEMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esropenSUSEWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 Highfirefox-esropenSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 Mediumfirefox-esropenSUSEIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 Criticalfirefox-esropenSUSERemote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have...6.5 Mediumfirefox-esropenSUSEIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 Highfirefox-esropenSUSEBy using XSL Transforms, a malicious webserver could have served a user an XSL document that...8.8 Highfirefox-esropenSUSEIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 Mediumfirefox-esropenSUSEMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan...8.8 Highfirefox-esropenSUSEA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 Mediumfirefox-esropenSUSEThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped...8.8 Highfirefox-esropenSUSEMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in...8.8 Highfirefox-esropenSUSEMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 Highfirefox-esropenSUSEMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 Mediumfirefox-esropenSUSEAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 Mediumfirefox-esropenSUSESecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 Mediumfirefox-esropenSUSEWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 Mediumfirefox-esropenSUSEWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 Mediumfirefox-esropenSUSEWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 Highfirefox-esropenSUSECertain network request objects were freed too early when releasing a network request handle....8.8 Highfirefox-esropenSUSEMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Mediumfirefox-esropenSUSEApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 Highfirefox-esropenSUSEConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 Highfirefox-esropenSUSEIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....10.0 Criticalfirefox-esropenSUSEWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...6.1 Mediumfirefox-esropenSUSEIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...4.3 Mediumfirefox-esropenSUSEUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Mediumfirefox-esropenSUSEDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...6.1 Mediumfirefox-esropenSUSEUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Mediumfirefox-esropenSUSEWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...6.5 Mediumfirefox-esropenSUSEWebExtensions with the correct permissions were able to create and install ServiceWorkers for...6.5 Mediumfirefox-esropenSUSEFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 Highfirefox-esropenSUSEBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Mediumfirefox-esropenSUSEAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 Highfirefox-esropenSUSEUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Mediumfirefox-esropenSUSEThe executable file warning was not presented when downloading .inetloc files, which, due to a...8.8 Highfirefox-esropenSUSEMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 Mediumfirefox-esropenSUSEFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...8.1 High- Show moreLoading…