firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEWhen using the Performance API, an attacker was able to notice subtle differences between...6.1 Mediumfirefox-esropenSUSEWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 Mediumfirefox-esropenSUSEThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...6.5 Mediumfirefox-esropenSUSEMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...9.8 Criticalfirefox-esropenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 Highfirefox-esropenSUSEAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...8.8 Highfirefox-esropenSUSEWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...8.8 Highfirefox-esropenSUSEThe MediaError message property should be consistent to avoid leaking information about cross...7.5 Highfirefox-esropenSUSEASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...9.8 Criticalfirefox-esropenSUSESVG <code><use></code> tags that referenced a same-origin document could have resulted in...6.1 Mediumfirefox-esropenSUSEEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...6.1 Mediumfirefox-esropenSUSEThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...6.1 Mediumfirefox-esropenSUSEWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 Mediumfirefox-esropenSUSEThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...8.8 Highfirefox-esropenSUSEIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 Highfirefox-esropenSUSEA malicious website that could create a popup could have resized the popup to overlay the address...6.5 Mediumfirefox-esropenSUSEIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...4.3 Mediumfirefox-esropenSUSESession history navigations may have led to a use-after-free and potentially exploitable crash....9.8 Criticalfirefox-esropenSUSEAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...8.8 Highfirefox-esropenSUSEIf an object prototype was corrupted by an attacker, they would have been able to set undesired...8.8 Highfirefox-esropenSUSEWhen downloading files on Windows, the % character was not escaped, which could have lead to a...8.8 Highfirefox-esropenSUSEMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla...9.8 Criticalfirefox-esropenSUSEMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...9.8 Criticalfirefox-esropenSUSEIf array shift operations are not used, the Garbage Collector may have become confused about...4.3 Mediumfirefox-esropenSUSEAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...6.5 Mediumfirefox-esropenSUSEFirefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity...6.5 Mediumfirefox-esropenSUSEAn attacker could have exploited a timing attack by sending a large number of allowCredential...6.5 Mediumfirefox-esropenSUSEA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 Highfirefox-esropenSUSEOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register...8.8 Highfirefox-esropenSUSEWhen exiting fullscreen mode, an iframe could have confused the browser about the current state...6.5 Mediumfirefox-esropenSUSEA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory...9.8 Criticalfirefox-esropenSUSEA malicious website could have learned the size of a cross-origin resource that supported Range...9.8 Criticalfirefox-esropenSUSEUse after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 Highfirefox-esropenSUSEIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 Highfirefox-esropenSUSEAn attacker could have sent a message to the parent process where the contents were used to...8.8 Highfirefox-esropenSUSEMozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory...8.8 Highfirefox-esropenSUSEThe Performance API did not properly hide the fact whether a request cross-origin resource has...4.3 Mediumfirefox-esropenSUSEMozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...9.8 Criticalfirefox-esropenSUSEFirefox behaved slightly differently for already known resources when loading CSS resources...6.5 Mediumfirefox-esropenSUSEWhen reusing existing popups Firefox would have allowed them to cover the fullscreen notification...6.5 Mediumfirefox-esropenSUSERequests initiated through reader mode did not properly omit cookies with a SameSite attribute....6.1 Mediumfirefox-esropenSUSEAn improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user...6.1 Mediumfirefox-esropenSUSEDocuments in deeply-nested cross-origin browsing contexts could have obtained permissions granted...8.8 Highfirefox-esropenSUSEMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing...8.8 Highfirefox-esropenSUSEIn unusual circumstances, selecting text could cause text selection caching to behave incorrectly...6.5 Mediumfirefox-esropenSUSESVG's <code><use></code> element could have been used to load unexpected content that could...8.8 Highfirefox-esropenSUSEThe sourceMapURL feature in devtools was missing security checks that would have allowed a...6.5 Mediumfirefox-esropenSUSEMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 Highfirefox-esropenSUSEDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 Mediumfirefox-esropenSUSEWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 Medium- Show moreLoading…