firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEPrivilege escalation in Thunderbird Updater8.8 Highfirefox-esropenSUSERace condition in nsHttpTransaction could lead to memory corruption6.5 Mediumfirefox-esropenSUSETab title disclosure across pages when using AI chatbot5.3 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 137 and Thunderbird 1378.1 Highfirefox-esropenSUSEOpening local .url files could lead to another file being opened7.7 Highfirefox-esropenSUSELeaking file descriptors from the fork server7.4 Highfirefox-esropenSUSEJIT optimization bug with different stack slot sizes6.5 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.98.1 Highfirefox-esropenSUSEURL Bar Spoofing via non-BMP Unicode characters7.3 Highfirefox-esropenSUSEUse-after-free triggered by XSLTProcessor6.5 Mediumfirefox-esropenSUSEIncorrect handle could lead to sandbox escapes10.0 Criticalfirefox-esropenSUSEIncorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior...8.3 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 136 and Thunderbird 1368.2 Highfirefox-esropenSUSEDisclosure of uninitialized memory when .toUpperCase() causes string to get longer9.8 Criticalfirefox-esropenSUSELock screen setting bypass in Firefox Focus for Android9.1 Criticalfirefox-esropenSUSEAndroid Intent confirmation prompt tapjacking using Select options7.1 Highfirefox-esropenSUSETapjacking in Android Custom Tabs using transition animations3.9 Lowfirefox-esropenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 Highfirefox-esropenSUSEAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 Highfirefox-esropenSUSEClickjacking the registerProtocolHandler info-bar4.3 Mediumfirefox-esropenSUSEUnexpected GC during RegExp bailout processing6.5 Mediumfirefox-esropenSUSEJIT corruption of WASM i32 return values on 64-bit CPUs7.6 Highfirefox-esropenSUSEInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 Highfirefox-esropenSUSEUse-after-free in WebTransportChild7.5 Highfirefox-esropenSUSEAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 135 and Thunderbird 1359.8 Criticalfirefox-esropenSUSEFullscreen notification not properly displayed4.3 Mediumfirefox-esropenSUSEFullscreen notification is not displayed when fullscreen is re-requested5.3 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Criticalfirefox-esropenSUSEMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Criticalfirefox-esropenSUSECertificate length was not properly checked8.8 Highfirefox-esropenSUSEPotential opening of private browsing tabs in normal browsing windows6.5 Mediumfirefox-esropenSUSEUse-after-free during concurrent delazification7.5 Highfirefox-esropenSUSEA bug in WebAssembly code generation could result in a crash8.8 Highfirefox-esropenSUSEUse-after-free in Custom Highlight8.8 Highfirefox-esropenSUSEUse-after-free in XSLT9.8 Criticalfirefox-esropenSUSEMemory safety bugs fixed in Firefox 134 and Thunderbird 1349.8 Criticalfirefox-esropenSUSEAddress bar spoofing using an invalid protocol scheme on Firefox for Android6.5 Mediumfirefox-esropenSUSELock screen setting bypass in Firefox Focus for Android3.3 Lowfirefox-esropenSUSEAddress bar spoofing using an invalid protocol scheme on Firefox for Android5.3 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.65.1 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.66.5 Mediumfirefox-esropenSUSEMemory corruption when using JavaScript Text Segmentation7.7 Highfirefox-esropenSUSECompartment mismatch when parsing JavaScript JSON module4.0 Mediumfirefox-esropenSUSEAlt-Svc ALPN validation failure when redirected4.0 Mediumfirefox-esropenSUSEUse-after-free when breaking lines in text5.3 Mediumfirefox-esropenSUSEWebChannel APIs susceptible to confused deputy attack5.4 Mediumfirefox-esropenSUSEIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer...7.8 Highfirefox-esropenSUSEMissing thread synchronization primitives could have led to a data race on members of the...6.5 Medium- Show moreLoading…