firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSESearch terms persisted in URL bar8.1 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 1418.8 Highfirefox-esropenSUSEIncorrect JavaScript state machine for generators6.5 Mediumfirefox-esropenSUSECSP frame-src was not correctly enforced for paths9.8 Criticalfirefox-esropenSUSEXSLT documents could bypass CSP8.1 Highfirefox-esropenSUSEIncorrect URL stripping in CSP reports9.8 Criticalfirefox-esropenSUSENameless cookies shadow secure cookies9.1 Criticalfirefox-esropenSUSEDNS rebinding circumvents CORS8.1 Highfirefox-esropenSUSEPotential user-assisted code execution in “Copy as cURL” command8.1 Highfirefox-esropenSUSEjavascript: URLs executed on object and embed tags8.1 Highfirefox-esropenSUSELarge branch table could lead to truncated instruction9.8 Criticalfirefox-esropenSUSEJavaScript engine only wrote partial return value to stack6.5 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 Highfirefox-esropenSUSESave as in Devtools could download files without sanitizing the extension8.1 Highfirefox-esropenSUSEHTTPS-Only exception screen lacked anti-clickjacking delay4.3 Mediumfirefox-esropenSUSEWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 Criticalfirefox-esropenSUSEDNS Requests leaked outside of a configured SOCKS proxy8.6 Highfirefox-esropenSUSEThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 Mediumfirefox-esropenSUSEFirefox for Android opened URLs specified in a link querystring parameter4.3 Mediumfirefox-esropenSUSEContent-Disposition header ignored when a file is included in an embed or object tag6.1 Mediumfirefox-esropenSUSEconnect-src Content Security Policy restriction could be bypassed9.1 Criticalfirefox-esropenSUSEIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Mediumfirefox-esropenSUSENo warning when opening executable terminal files on macOS8.8 Highfirefox-esropenSUSEThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Mediumfirefox-esropenSUSEUse-after-free in FontFaceSet9.8 Criticalfirefox-esropenSUSEInteger overflow in OrderedHashTable9.8 Criticalfirefox-esropenSUSEMemory corruption in canvas surfaces9.8 Criticalfirefox-esropenSUSEMemory safety bugs fixed in Firefox 139 and Thunderbird 1397.3 Highfirefox-esropenSUSEDevtools' preview ignored CSP headers6.5 Mediumfirefox-esropenSUSESNI was sometimes unencrypted7.5 Highfirefox-esropenSUSEMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 Highfirefox-esropenSUSEMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 Highfirefox-esropenSUSEClickjacking vulnerability could have led to leaking saved payment card details5.4 Mediumfirefox-esropenSUSEScript element events leaked cross-origin resource status4.3 Mediumfirefox-esropenSUSEPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-esropenSUSEPotential local code execution in “Copy as cURL” command4.8 Mediumfirefox-esropenSUSEError handling for script execution was incorrectly isolated from web content4.3 Mediumfirefox-esropenSUSEA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 Highfirefox-esropenSUSEOut-of-bounds access when optimizing linear sums8.8 Highfirefox-esropenSUSEOut-of-bounds access when resolving Promise objects9.8 Criticalfirefox-esropenSUSEMemory safety bugs fixed in Firefox 138 and Thunderbird 1386.5 Mediumfirefox-esropenSUSEMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 Highfirefox-esropenSUSELeaked library paths in Thunderbird for Android5.3 Mediumfirefox-esropenSUSEPotential local code execution in "copy as cURL" command5.1 Mediumfirefox-esropenSUSECross-site request forgery via storage access API redirects6.5 Mediumfirefox-esropenSUSEUnsafe attribute access during XPath parsing4.8 Mediumfirefox-esropenSUSESpecially crafted filename could be used to obscure download type6.5 Mediumfirefox-esropenSUSEPotential information leakage and privilege escalation in UITour actor7.1 Highfirefox-esropenSUSEProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Criticalfirefox-esropenSUSEWebGL shader attribute memory corruption in Thunderbird for macOS5.9 Medium- Show moreLoading…