firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEFirefox normally asks for confirmation before asking the operating system to find an application...7.5 Highfirefox-esropenSUSEInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highfirefox-esropenSUSEA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalfirefox-esropenSUSEIncorrect garbage collection interaction could have led to a use-after-free. This vulnerability...8.8 Highfirefox-esropenSUSECalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 Mediumfirefox-esropenSUSEThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Mediumfirefox-esropenSUSEA select option could partially obscure security prompts. This could be used by a malicious site...8.1 Highfirefox-esropenSUSEIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 Highfirefox-esropenSUSEUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 Highfirefox-esropenSUSEANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Mediumfirefox-esropenSUSEIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 Highfirefox-esropenSUSEFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 Mediumfirefox-esropenSUSEEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 Highfirefox-esropenSUSEIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 Highfirefox-esropenSUSEA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 Highfirefox-esropenSUSEInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Criticalfirefox-esropenSUSESelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 Highfirefox-esropenSUSEIncorrect listing of stack frames4.3 Mediumfirefox-esropenSUSEIncorrect listing of stack frames5.5 Mediumfirefox-esropenSUSECSP violation leakage when using devtools5.3 Mediumfirefox-esropenSUSEIncorrect handling of SameSite cookies9.8 Criticalfirefox-esropenSUSEForm validation popups could block exiting full-screen mode4.3 Mediumfirefox-esropenSUSEMemory corruption in NSS8.8 Highfirefox-esropenSUSECursor could be moved out of the viewport using pointerlock.4.3 Mediumfirefox-esropenSUSELeaving pointerlock by pressing the escape key could be prevented8.8 Highfirefox-esropenSUSEOut-of-bounds read in clipboard component8.2 Highfirefox-esropenSUSEFirefox Android missed activation delay to prevent tapjacking8.8 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 Highfirefox-esropenSUSEMemory corruption in thread creation7.4 Highfirefox-esropenSUSEMemory corruption in NSS9.8 Criticalfirefox-esropenSUSERace condition in permission assignment4.7 Mediumfirefox-esropenSUSEMemory corruption in WebGL API6.3 Mediumfirefox-esropenSUSEMozillaFirefox-50.1.0-1.1 on GA mediaNo scorefirefox-esropenSUSEMemory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEIn violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not...9.8 Criticalfirefox-esropenSUSEBy manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid...6.1 Mediumfirefox-esropenSUSEA website was able to detect when a user took a screenshot of a page using the built-in...4.3 Mediumfirefox-esropenSUSEIf an out-of-memory condition occurs at a specific point using allocations in the probabilistic...9.8 Criticalfirefox-esropenSUSEAn attacker could have caused a use-after-free in the JavaScript engine to read memory in the...7.5 Highfirefox-esropenSUSEIn addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay...4.3 Mediumfirefox-esropenSUSEIf a specific sequence of actions is performed when opening a new tab, the triggering principal...5.3 Mediumfirefox-esropenSUSEOn Windows, when using the 'Save As' functionality, an attacker could have tricked the browser...6.5 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 Highfirefox-esropenSUSEBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 Highfirefox-esropenSUSEOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Mediumfirefox-esropenSUSEBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Mediumfirefox-esropenSUSEBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Mediumfirefox-esropenSUSEIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory...9.8 Critical- Show moreLoading…