firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and...8.8 Highfirefox-esropenSUSEMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 Highfirefox-esropenSUSEDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Mediumfirefox-esropenSUSEWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 Mediumfirefox-esropenSUSEWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 Highfirefox-esropenSUSEIf temporary "one-time" permissions, such as the ability to use the Camera, were granted to a...8.8 Highfirefox-esropenSUSEWhen following a redirect to a publicly accessible web extension file, the URL may have been...6.5 Mediumfirefox-esropenSUSEThe fullscreen notification could have been hidden on Firefox for Android by using download...4.3 Mediumfirefox-esropenSUSEWhen accessing throttled streams, the count of available bytes needed to be checked in the...6.5 Mediumfirefox-esropenSUSESometimes, when invalidating JIT code while following an iterator, the newly generated code could...6.5 Mediumfirefox-esropenSUSEUnder certain circumstances, a ServiceWorker's offline cache may have leaked to the file system...4.3 Mediumfirefox-esropenSUSEAndroid applications with unpatched vulnerabilities can be launched from a browser using Intents,...4.3 Mediumfirefox-esropenSUSEBy displaying a prompt with a long description, the fullscreen notification could have been...4.3 Mediumfirefox-esropenSUSEMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...6.5 Mediumfirefox-esropenSUSEAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker...8.1 Highfirefox-esropenSUSEA lack of in app notification for entering fullscreen mode could have lead to a malicious website...7.5 Highfirefox-esropenSUSEMozilla developers Timothy Nikkel, Gabriele Svelto, Jeff Muizelaar and the Mozilla Fuzzing Team...8.8 Highfirefox-esropenSUSEMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 Highfirefox-esropenSUSEWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing...6.5 Mediumfirefox-esropenSUSEWhen dragging and dropping an image cross-origin, the image's size could potentially be leaked....6.5 Mediumfirefox-esropenSUSEModule load requests that failed were not being checked as to whether or not they were cancelled...8.8 Highfirefox-esropenSUSEAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 Highfirefox-esropenSUSEAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior....9.8 Criticalfirefox-esropenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-esropenSUSEThe return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have...7.5 Highfirefox-esropenSUSEWhen encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input...8.8 Highfirefox-esropenSUSEDue to URL previews in the network panel of developer tools improperly storing URLs, query...8.8 Highfirefox-esropenSUSEA background script invoking <code>requestFullscreen</code> and then blocking the main thread...5.4 Mediumfirefox-esropenSUSEPermission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...8.8 Highfirefox-esropenSUSEThe <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a...6.5 Mediumfirefox-esropenSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 1098.8 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 Highfirefox-esropenSUSECreation of duplicate SystemPrincipal from less secure contexts6.5 Mediumfirefox-esropenSUSECalls to console.log allowed bypassing Content Security Policy via format directive6.5 Mediumfirefox-esropenSUSEContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 Mediumfirefox-esropenSUSEURL being dragged from cross-origin iframe into same tab triggers navigation6.5 Mediumfirefox-esropenSUSEMalicious command could be hidden in devtools output on Windows6.5 Mediumfirefox-esropenSUSEArbitrary file read from GTK drag and drop on Linux6.5 Mediumfirefox-esropenSUSELogic bug in process allocation allowed to read arbitrary files6.5 Mediumfirefox-esropenSUSEDuring startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow...6.5 Mediumfirefox-esropenSUSEA website that had permission to access the microphone could record audio without the audio...4.3 Mediumfirefox-esropenSUSEWhen visiting a website with an overly long URL, the user interface would start to hang. Due to...6.5 Mediumfirefox-esropenSUSEWhen closed or sent to the background, Firefox for Android would not properly record and persist...6.1 Mediumfirefox-esropenSUSEUnder certain circumstances, a JavaScript alert (or prompt) could have been shown while another...4.3 Mediumfirefox-esropenSUSEWhen clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be...8.8 Highfirefox-esropenSUSEBy generally accepting and passing resource handles across processes, a compromised content...6.5 Mediumfirefox-esropenSUSEWhen scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do...4.3 Mediumfirefox-esropenSUSEIf Firefox was installed to a world-writable directory, a local privilege escalation could occur...7.0 High- Show moreLoading…