firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the...8.8 Highfirefox-esropenSUSEBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 Mediumfirefox-esropenSUSEBecause Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who...8.8 Highfirefox-esropenSUSEAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 Highfirefox-esropenSUSEMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 Highfirefox-esropenSUSEThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 Mediumfirefox-esropenSUSEA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 Highfirefox-esropenSUSEAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 Highfirefox-esropenSUSEMozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in...8.8 Highfirefox-esropenSUSEUse tables inside of an iframe, an attacker could have caused iframe contents to be rendered...6.5 Mediumfirefox-esropenSUSEIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS...6.5 Mediumfirefox-esropenSUSEIf a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have...6.1 Mediumfirefox-esropenSUSEService Workers did not detect Private Browsing Mode correctly in all cases, which could have led...4.3 Mediumfirefox-esropenSUSEKeyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread...6.5 Mediumfirefox-esropenSUSEWhen downloading an HTML file, if the title of the page was formatted as a filename with a...7.8 Highfirefox-esropenSUSEUsing the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a...6.1 Mediumfirefox-esropenSUSEWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be...8.8 Highfirefox-esropenSUSECross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing...6.1 Mediumfirefox-esropenSUSEWhen a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the...6.5 Mediumfirefox-esropenSUSEThe garbage collector could have been aborted in several states and zones and <code>GCRuntime:...8.8 Highfirefox-esropenSUSEThrough a series of popups that reuse windowName, an attacker can cause a window to go fullscreen...6.5 Mediumfirefox-esropenSUSEIf an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after...7.5 Highfirefox-esropenSUSEIf an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may...9.8 Criticalfirefox-esropenSUSEFreeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have...6.5 Mediumfirefox-esropenSUSEThrough a series of popup and <code>window.print()</code> calls, an attacker can cause a window...6.5 Mediumfirefox-esropenSUSEService Workers should not be able to infer information about opaque cross-origin responses; but...6.5 Mediumfirefox-esropenSUSELogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 Lowfirefox-esropenSUSEIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 Highfirefox-esropenSUSEMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esropenSUSEIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 Mediumfirefox-esropenSUSECertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 Highfirefox-esropenSUSEA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 Highfirefox-esropenSUSEInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 Mediumfirefox-esropenSUSEMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...8.8 Highfirefox-esropenSUSEConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...6.5 Mediumfirefox-esropenSUSEDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...6.5 Mediumfirefox-esropenSUSEBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...6.5 Mediumfirefox-esropenSUSEWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...6.1 Mediumfirefox-esropenSUSEWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 Mediumfirefox-esropenSUSEWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 Highfirefox-esropenSUSElibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 Highfirefox-esropenSUSEMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 Highfirefox-esropenSUSEMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esropenSUSEAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 Mediumfirefox-esropenSUSEA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 Highfirefox-esropenSUSEAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 Mediumfirefox-esropenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...8.8 Highfirefox-esropenSUSEMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...9.8 Criticalfirefox-esropenSUSEWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 Highfirefox-esropenSUSEWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Medium- Show moreLoading…