mozjs128 vulnerabilities (openSUSE)
83 vulnerabilities.
mozjs128openSUSEMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 Highmozjs128openSUSEBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 Highmozjs128openSUSEA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Mediummozjs128openSUSERepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Mediummozjs128openSUSEVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Mediummozjs128openSUSETruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Mediummozjs128openSUSEIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Mediummozjs128openSUSEThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Mediummozjs128openSUSEAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 Highmozjs128openSUSEA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 Highmozjs128openSUSEAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 Mediummozjs128openSUSEAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Criticalmozjs128openSUSEMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Criticalmozjs128openSUSEMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Criticalmozjs128openSUSEA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 Highmozjs128openSUSEA website configured to initiate a specially crafted WebTransport session could crash the Firefox...7.5 Highmozjs128openSUSEBy checking the result of calls to `window.open` with specifically set protocol handlers, an...5.3 Mediummozjs128openSUSEA missing delay in directory upload UI could have made it possible for an attacker to trick a...6.1 Mediummozjs128openSUSEIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 Highmozjs128openSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highmozjs128openSUSEAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under...7.5 Highmozjs128openSUSEA compromised content process could have allowed for the arbitrary loading of cross-origin pages....9.8 Criticalmozjs128openSUSEAn attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...7.5 Highmozjs128openSUSEMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Criticalmozjs128openSUSEIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Mediummozjs128openSUSEA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Criticalmozjs128openSUSEThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...9.8 Criticalmozjs128openSUSEFirefox normally asks for confirmation before asking the operating system to find an application...7.5 Highmozjs128openSUSEInternal browser event interfaces were exposed to web content when privileged EventHandler...8.8 Highmozjs128openSUSEA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Criticalmozjs128openSUSEAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an...9.8 Criticalmozjs128openSUSEAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer...9.8 Criticalmozjs128openSUSEAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length...7.5 High