firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Mediumfirefox-esropenSUSEIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Mediumfirefox-esropenSUSEA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Mediumfirefox-esropenSUSEThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Mediumfirefox-esropenSUSEWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 Highfirefox-esropenSUSESome WASM source files could have caused a crash when loaded in devtools. This vulnerability...6.5 Mediumfirefox-esropenSUSEA use-after-free crash could have occurred on macOS if a Firefox update were being applied on a...6.5 Mediumfirefox-esropenSUSEA compromised content process could have updated the document URI. This could have allowed an...4.3 Mediumfirefox-esropenSUSEThe WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have...8.8 Highfirefox-esropenSUSEIn some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could...7.5 Highfirefox-esropenSUSEAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 Highfirefox-esropenSUSEIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Mediumfirefox-esropenSUSEA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 Highfirefox-esropenSUSEA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 Highfirefox-esropenSUSEA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Mediumfirefox-esropenSUSEWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 Mediumfirefox-esropenSUSEA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 Mediumfirefox-esropenSUSEIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Mediumfirefox-esropenSUSEAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...8.8 Highfirefox-esropenSUSEBrowser tab titles were being leaked by GNOME to system logs. This could potentially expose the...6.5 Mediumfirefox-esropenSUSEUnder certain conditions, Firefox did not display a warning when a user attempted to navigate to...4.3 Mediumfirefox-esropenSUSEApplications which spawn a Toast notification in a background thread may have obscured fullscreen...4.3 Mediumfirefox-esropenSUSEA `` element could have been manipulated to paint content outside of a sandboxed iframe. This...6.5 Mediumfirefox-esropenSUSEIn some instances, the user-agent would allow push requests which lacked a valid VAPID even...4.3 Mediumfirefox-esropenSUSEThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 Mediumfirefox-esropenSUSETypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in...8.8 Highfirefox-esropenSUSE`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 Mediumfirefox-esropenSUSEMultiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This...4.3 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 Highfirefox-esropenSUSEThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 Highfirefox-esropenSUSEThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 Highfirefox-esropenSUSEThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 Mediumfirefox-esropenSUSEA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 Highfirefox-esropenSUSEFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 Highfirefox-esropenSUSEWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Mediumfirefox-esropenSUSEThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory...8.8 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...8.8 Highfirefox-esropenSUSEIf an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS...6.5 Mediumfirefox-esropenSUSEWhen an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly...6.5 Mediumfirefox-esropenSUSERelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...6.5 Mediumfirefox-esropenSUSEWhen using X11, text selected by the page using the Selection API was erroneously copied into the...8.8 Highfirefox-esropenSUSEOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...8.8 Highfirefox-esropenSUSEThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...5.4 Mediumfirefox-esropenSUSEIt was possible to cause the use of a MessagePort after it had already been freed, which could...6.5 Mediumfirefox-esropenSUSEOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...6.5 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Critical- Show moreLoading…