MozillaFirefox (SUSE:Linux Enterprise Software Development Kit 12 SP3) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 12 SP3 package MozillaFirefox, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (129)
CVE-2018-18505 — CVSS 10.0 (critical): An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC…
CVE-2018-18501 — CVSS 9.8 (critical): Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed…
CVE-2018-5099 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been…
CVE-2018-5089 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2018-5091 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially…
CVE-2018-5095 — CVSS 9.8 (critical): An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM…
CVE-2018-5096 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash…
CVE-2018-5097 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by…
CVE-2018-5098 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in…
CVE-2017-7800 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation…
CVE-2017-7801 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style…
CVE-2017-7802 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been…
CVE-2019-9796 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a…
CVE-2019-9795 — CVSS 9.8 (critical): A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to…
CVE-2019-9794 — CVSS 9.8 (critical): A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell…
CVE-2019-9792 — CVSS 9.8 (critical): The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This…
CVE-2017-7810 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2019-9791 — CVSS 9.8 (critical): The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled…
CVE-2017-7818 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within…
CVE-2017-7819 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been…
CVE-2019-9790 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then…
CVE-2017-7824 — CVSS 9.8 (critical): A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an…
CVE-2019-9788 — CVSS 9.8 (critical): Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of…
CVE-2017-7826 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2017-7828 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in…
CVE-2018-5102 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable…
CVE-2018-18500 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream…
CVE-2018-18493 — CVSS 9.8 (critical): A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the…
CVE-2018-18498 — CVSS 9.8 (critical): A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used…
CVE-2019-11693 — CVSS 9.8 (critical): The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious…
CVE-2017-7779 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory…
CVE-2019-9820 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially…
CVE-2017-7784 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This…
CVE-2017-7785 — CVSS 9.8 (critical): A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a…
CVE-2017-7786 — CVSS 9.8 (critical): A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially…
CVE-2019-11692 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a…
CVE-2019-11691 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called…
CVE-2018-5188 — CVSS 9.8 (critical): Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and…
CVE-2018-12376 — CVSS 9.8 (critical): Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that…
CVE-2018-12377 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is…
CVE-2018-12378 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload…
CVE-2018-5183 — CVSS 9.8 (critical): Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer…
CVE-2018-5159 — CVSS 9.8 (critical): An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in…
CVE-2018-5156 — CVSS 9.8 (critical): A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result…
CVE-2018-5155 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially…
CVE-2018-5154 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially…
CVE-2018-5150 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory…
CVE-2019-9819 — CVSS 9.8 (critical): A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable…
CVE-2018-12390 — CVSS 9.8 (critical): Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed…
CVE-2018-12392 — CVSS 9.8 (critical): When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable…
CVE-2018-5148 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a…
CVE-2018-5147 — CVSS 9.8 (critical): The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM…
CVE-2018-5145 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough…
CVE-2018-5104 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a…
CVE-2018-5103 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially…
CVE-2018-12405 — CVSS 9.8 (critical): Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed…
CVE-2019-9800 — CVSS 9.8 (critical): Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of…
CVE-2017-7792 — CVSS 9.8 (critical): A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object…
CVE-2017-7793 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting…
CVE-2018-18492 — CVSS 9.8 (critical): A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options…
CVE-2017-7753 — CVSS 9.1 (critical): An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This…
CVE-2018-12387 — CVSS 9.1 (critical): A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer…
CVE-2018-5127 — CVSS 8.8 (high): A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable…
CVE-2017-7798 — CVSS 8.8 (high): The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the…
CVE-2018-12359 — CVSS 8.8 (high): A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing…
CVE-2018-12360 — CVSS 8.8 (high): A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element…
CVE-2018-12362 — CVSS 8.8 (high): An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in…
CVE-2018-12363 — CVSS 8.8 (high): A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old…
CVE-2018-12364 — CVSS 8.8 (high): NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307…
CVE-2018-12389 — CVSS 8.8 (high): Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of…
CVE-2018-17466 — CVSS 8.8 (high): Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory…
CVE-2018-18335 — CVSS 8.8 (high): Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a…
CVE-2018-18356 — CVSS 8.8 (high): An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to…
CVE-2018-5125 — CVSS 8.8 (high): Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2018-5130 — CVSS 8.8 (high): When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is…
CVE-2018-5146 — CVSS 8.8 (high): An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects…
CVE-2018-5158 — CVSS 8.8 (high): The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a…
CVE-2018-6126 — CVSS 8.8 (high): A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a…
CVE-2019-9810 — CVSS 8.8 (high): Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer…
CVE-2019-9813 — CVSS 8.8 (high): Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read…
CVE-2018-5129 — CVSS 8.6 (high): A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can…
CVE-2019-9818 — CVSS 8.3 (high): A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a…
CVE-2018-12368 — CVSS 8.1 (high): Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded…
CVE-2019-9815 — CVSS 8.1 (high): If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS…
CVE-2018-5178 — CVSS 8.1 (high): A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This…
CVE-2017-7807 — CVSS 8.1 (high): A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been…
CVE-2018-12386 — CVSS 8.1 (high): A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to…
CVE-2017-7814 — CVSS 7.8 (high): File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware…
CVE-2018-12379 — CVSS 7.8 (high): When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading…
CVE-2017-7803 — CVSS 7.5 (high): When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the…
CVE-2018-12395 — CVSS 7.5 (high): By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting…
CVE-2018-12393 — CVSS 7.5 (high): A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16…
CVE-2018-5157 — CVSS 7.5 (high): Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This…
CVE-2018-5174 — CVSS 7.5 (high): In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files…
CVE-2019-11694 — CVSS 7.5 (high): A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making…
CVE-2017-7805 — CVSS 7.5 (high): During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in…
CVE-2017-7804 — CVSS 7.5 (high): The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability…
CVE-2017-7787 — CVSS 7.5 (high): Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content…
CVE-2018-5144 — CVSS 7.3 (high): An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This…
CVE-2018-12397 — CVSS 7.1 (high): A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all…
CVE-2018-12385 — CVSS 7.0 (high): A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user…
CVE-2018-18494 — CVSS 6.5 (medium): A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a…
CVE-2017-16541 — CVSS 6.5 (medium): Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP…
CVE-2017-7830 — CVSS 6.5 (medium): The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow…
CVE-2018-12396 — CVSS 6.5 (medium): A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for…
CVE-2019-5785 — CVSS 6.5 (medium): Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds…
CVE-2018-12366 — CVSS 6.5 (medium): An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This…
CVE-2018-12365 — CVSS 6.5 (medium): A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user…
CVE-2018-12384 — CVSS 5.9 (medium): When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead…
CVE-2019-9793 — CVSS 5.9 (medium): A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been…
CVE-2018-5131 — CVSS 5.9 (medium): Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache"…
CVE-2018-18506 — CVSS 5.9 (medium): When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this…
CVE-2018-12404 — CVSS 5.9 (medium): A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant…
CVE-2019-9816 — CVSS 5.9 (medium): A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the…
CVE-2018-12383 — CVSS 5.5 (medium): If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still…
CVE-2017-7823 — CVSS 5.4 (medium): The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the…
CVE-2017-7782 — CVSS 5.3 (medium): An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP…
CVE-2017-7791 — CVSS 5.3 (medium): On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following…
CVE-2019-9801 — CVSS 5.3 (medium): Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a…
CVE-2019-9817 — CVSS 5.3 (medium): Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a…
CVE-2017-7825 — CVSS 5.3 (medium): Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be…
CVE-2018-5168 — CVSS 5.3 (medium): Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element…
CVE-2018-5117 — CVSS 5.3 (medium): If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to…
CVE-2018-12381 — CVSS 5.3 (medium): Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are…
CVE-2019-7317 — CVSS 5.3 (medium): png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-11698 — CVSS 5.3 (medium): If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped…
CVE-2018-0495 — CVSS 4.7 (medium): Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through…