firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA file dialog shown while in full-screen mode could have resulted in the window remaining...8.2 Highfirefox-esropenSUSEAn iterator stop condition was missing when handling WASM code in the built-in profiler,...5.9 Mediumfirefox-esropenSUSEThe `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing...6.5 Mediumfirefox-esropenSUSEWhen a network error occurred during page load, the prior content could have remained in view...7.5 Highfirefox-esropenSUSEAn HTTP digest authentication nonce value was generated using `rand()` which could lead to...5.9 Mediumfirefox-esropenSUSEA memory allocation check was missing which would lead to a use-after-free if the allocation...8.6 Highfirefox-esropenSUSEDifferent techniques existed to obscure the fullscreen notification in Firefox for Android. ...4.3 Mediumfirefox-esropenSUSEWeb application manifests were stored by using an insecure MD5 hash which allowed for a hash...8.1 Highfirefox-esropenSUSEMultiple WebRTC threads could have claimed a newly connected audio input leading to use-after...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 Highfirefox-esropenSUSEWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 Highfirefox-esropenSUSEWhen importing resources using Web Workers, error messages would distinguish the difference...5.9 Mediumfirefox-esropenSUSEA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...6.1 Mediumfirefox-esropenSUSEIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...4.3 Mediumfirefox-esropenSUSEPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory...8.1 Highfirefox-esropenSUSEMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 Highfirefox-esropenSUSEThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 Lowfirefox-esropenSUSEThe executable file warning was not presented when downloading .xrm-ms files. *Note: This issue...9.8 Criticalfirefox-esropenSUSEThe MarkStack assignment operator, part of the JavaScript engine, could access uninitialized...5.3 Mediumfirefox-esropenSUSEIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...4.0 Mediumfirefox-esropenSUSEAn out-of-memory condition during object initialization could result in an empty shape list. If...6.2 Mediumfirefox-esropenSUSEOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Mediumfirefox-esropenSUSEIt was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This...7.5 Highfirefox-esropenSUSEThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...7.8 Highfirefox-esropenSUSEA use-after-free could occur during WASM execution if garbage collection ran during the creation...8.8 Highfirefox-esropenSUSEIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds...6.5 Mediumfirefox-esropenSUSEIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...8.8 Highfirefox-esropenSUSEA use-after-free could result if a JavaScript realm was in the process of being initialized when...7.5 Highfirefox-esropenSUSEGetBoundName could return the wrong version of an object when JIT optimizations were applied....7.5 Highfirefox-esropenSUSEAn attacker was able to inject an event handler into a privileged object that would allow...8.4 Highfirefox-esropenSUSEAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling...9.8 Criticalfirefox-esropenSUSEAn attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system...5.9 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 Highfirefox-esropenSUSEData was not properly sanitized when decoding a QUIC ACK frame; this could have led to...7.5 Highfirefox-esropenSUSEIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 Highfirefox-esropenSUSEA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Mediumfirefox-esropenSUSEUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Mediumfirefox-esropenSUSEThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Mediumfirefox-esropenSUSE`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 Highfirefox-esropenSUSEReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 Highfirefox-esropenSUSEPassing invalid data could have led to invalid wasm values being created, such as arbitrary...3.7 Lowfirefox-esropenSUSEMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory...8.1 Highfirefox-esropenSUSEThe incorrect object was checked for NULL in the built-in profiler, potentially leading to...6.5 Mediumfirefox-esropenSUSEWhen opening a website using the `firefox://` protocol handler, SameSite cookies were not...8.3 Highfirefox-esropenSUSEThe `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 Highfirefox-esropenSUSEIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 Highfirefox-esropenSUSESet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Medium- Show moreLoading…