firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEMemory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of...8.8 Highfirefox-esropenSUSEA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the...6.5 Mediumfirefox-esropenSUSE`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was...9.1 Criticalfirefox-esropenSUSEA flaw in handling fullscreen transitions may have inadvertently caused the application to become...9.8 Criticalfirefox-esropenSUSEA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an...9.8 Criticalfirefox-esropenSUSEWhen handling keypress events, an attacker may have been able to trick a user into bypassing the ...8.8 Highfirefox-esropenSUSEThe application failed to account for exceptions thrown by the `loadManifestFromFile` method...5.4 Mediumfirefox-esropenSUSEOn Android, Firefox may have inadvertently allowed viewing saved passwords without the required...5.7 Mediumfirefox-esropenSUSEA crafted URL containing Arabic script and whitespace characters could have hidden the true...5.4 Mediumfirefox-esropenSUSECopying sensitive information from Private Browsing tabs on Android, such as passwords, may have...7.5 Highfirefox-esropenSUSEEnhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`...6.1 Mediumfirefox-esropenSUSEThe executable file warning was not presented when downloading .library-ms files. *Note: This...9.8 Criticalfirefox-esropenSUSEThe incorrect domain may have been displayed in the address bar during an interrupted navigation...4.3 Mediumfirefox-esropenSUSEMalicious websites may have been able to user intent confirmation through tapjacking. This could...8.1 Highfirefox-esropenSUSEAn attacker could cause a select dropdown to be shown over another tab; this could have led to...4.3 Mediumfirefox-esropenSUSEAn attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be...8.8 Highfirefox-esropenSUSEPotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highfirefox-esropenSUSEBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highfirefox-esropenSUSEA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediumfirefox-esropenSUSERepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediumfirefox-esropenSUSEVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediumfirefox-esropenSUSETruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediumfirefox-esropenSUSEIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediumfirefox-esropenSUSEThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediumfirefox-esropenSUSEAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highfirefox-esropenSUSEA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highfirefox-esropenSUSEInappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723...7.8 Highfirefox-esropenSUSEWhen manipulating the selection node cache, an attacker may have been able to cause unexpected...6.5 Mediumfirefox-esropenSUSEAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 Highfirefox-esropenSUSEA specially crafted filename containing a large number of spaces could obscure the file's...5.3 Mediumfirefox-esropenSUSEA user who enables full-screen mode on a specially crafted web page could potentially be...6.5 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalfirefox-esropenSUSEMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalfirefox-esropenSUSEA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highfirefox-esropenSUSEA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highfirefox-esropenSUSEBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediumfirefox-esropenSUSEA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediumfirefox-esropenSUSEIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highfirefox-esropenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-esropenSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highfirefox-esropenSUSEA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalfirefox-esropenSUSEAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 Highfirefox-esropenSUSEMemory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMultiple prompts and panels from both Firefox and the Android OS could be used to obscure the...5.3 Mediumfirefox-esropenSUSEMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalfirefox-esropenSUSEIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediumfirefox-esropenSUSEA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalfirefox-esropenSUSEThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Critical- Show moreLoading…