firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 Mediumfirefox-esropenSUSEA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 Highfirefox-esropenSUSEUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 Mediumfirefox-esropenSUSEThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 Mediumfirefox-esropenSUSEA website could have obscured the fullscreen notification by using an option element by...6.5 Mediumfirefox-esropenSUSEInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 Highfirefox-esropenSUSEWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 Highfirefox-esropenSUSEWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 Highfirefox-esropenSUSEA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Mediumfirefox-esropenSUSECross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 Highfirefox-esropenSUSEAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 Highfirefox-esropenSUSEWhen recording the screen while in Private Browsing on Firefox for Android the address bar and...6.5 Mediumfirefox-esropenSUSEDifferent techniques existed to obscure the fullscreen notification in Firefox and Focus for...9.1 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Criticalfirefox-esropenSUSEWhen choosing a site-isolated process for a document loaded from a data: URL that was the result...6.1 Mediumfirefox-esropenSUSEThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Lowfirefox-esropenSUSEAfter downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could...8.8 Highfirefox-esropenSUSENotification permissions persisted between Normal and Private Browsing on Android6.5 Mediumfirefox-esropenSUSEProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 Highfirefox-esropenSUSEWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 Highfirefox-esropenSUSEAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Mediumfirefox-esropenSUSEA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Mediumfirefox-esropenSUSEDocuments were incorrectly assuming an ordering of principal objects when ensuring we were...6.5 Mediumfirefox-esropenSUSEA maliciously crafted favicon could have led to an out of memory crash. This vulnerability...7.5 Highfirefox-esropenSUSEService workers could reveal script base URL due to dynamic `import()`. This vulnerability...5.3 Mediumfirefox-esropenSUSEA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 Highfirefox-esropenSUSEAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Mediumfirefox-esropenSUSEIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Mediumfirefox-esropenSUSEMozilla developers Randell Jesup, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team...8.8 Highfirefox-esropenSUSEUnder certain circumstances, a call to the <code>bind</code> function may have resulted in the...6.5 Mediumfirefox-esropenSUSEWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain...6.5 Mediumfirefox-esropenSUSEIf multiple instances of resource exhaustion occurred at the incorrect time, the garbage...6.5 Mediumfirefox-esropenSUSEAn attacker could have caused memory corruption and a potentially exploitable use-after-free of a...8.8 Highfirefox-esropenSUSEUsing a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to...6.1 Mediumfirefox-esropenSUSEUnder specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI...4.3 Mediumfirefox-esropenSUSEMultiple race conditions in the font initialization could have led to memory corruption and...7.5 Highfirefox-esropenSUSEMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 Highfirefox-esropenSUSEA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Mediumfirefox-esropenSUSESimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 Mediumfirefox-esropenSUSEA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 Criticalfirefox-esropenSUSEFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 Highfirefox-esropenSUSEWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 Highfirefox-esropenSUSEAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 Highfirefox-esropenSUSEFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Mediumfirefox-esropenSUSEA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Mediumfirefox-esropenSUSEA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 Medium- Show moreLoading…