MozillaFirefox (SUSE:OpenStack Cloud 6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 6 package MozillaFirefox, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (89)

• CVE-2017-7801 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style…
• CVE-2017-5440 — CVSS 9.8 (critical): A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating…
• CVE-2017-5441 — CVSS 9.8 (critical): A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This…
• CVE-2017-5442 — CVSS 9.8 (critical): A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash…
• CVE-2017-7779 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory…
• CVE-2018-5095 — CVSS 9.8 (critical): An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM…
• CVE-2017-7784 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This…
• CVE-2017-7785 — CVSS 9.8 (critical): A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a…
• CVE-2017-7786 — CVSS 9.8 (critical): A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially…
• CVE-2017-5439 — CVSS 9.8 (critical): A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially…
• CVE-2018-5091 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially…
• CVE-2017-7792 — CVSS 9.8 (critical): A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object…
• CVE-2017-7793 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting…
• CVE-2017-7800 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation…
• CVE-2017-7802 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been…
• CVE-2017-7810 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume…
• CVE-2017-7818 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within…
• CVE-2017-7819 — CVSS 9.8 (critical): A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been…
• CVE-2018-5089 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume…
• CVE-2017-7824 — CVSS 9.8 (critical): A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an…
• CVE-2017-7828 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in…
• CVE-2017-7826 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume…
• CVE-2017-5443 — CVSS 9.8 (critical): An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird <…
• CVE-2017-5429 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of…
• CVE-2017-5430 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption…
• CVE-2017-5446 — CVSS 9.8 (critical): An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially…
• CVE-2017-5432 — CVSS 9.8 (critical): A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability…
• CVE-2018-5104 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a…
• CVE-2017-5433 — CVSS 9.8 (critical): A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the…
• CVE-2017-5434 — CVSS 9.8 (critical): A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability…
• CVE-2017-5456 — CVSS 9.8 (critical): A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This…
• CVE-2017-5459 — CVSS 9.8 (critical): A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird…
• CVE-2017-5460 — CVSS 9.8 (critical): A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This…
• CVE-2017-5461 — CVSS 9.8 (critical): Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1…
• CVE-2018-5103 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially…
• CVE-2017-5464 — CVSS 9.8 (critical): During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading…
• CVE-2018-5102 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable…
• CVE-2017-5435 — CVSS 9.8 (critical): A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a…
• CVE-2017-5469 — CVSS 9.8 (critical): Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird <…
• CVE-2017-5470 — CVSS 9.8 (critical): Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume…
• CVE-2017-5472 — CVSS 9.8 (critical): A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node…
• CVE-2017-7749 — CVSS 9.8 (critical): A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable…
• CVE-2017-7750 — CVSS 9.8 (critical): A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window…
• CVE-2017-7751 — CVSS 9.8 (critical): A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects…
• CVE-2017-7756 — CVSS 9.8 (critical): A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a…
• CVE-2017-7757 — CVSS 9.8 (critical): A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed…
• CVE-2018-5099 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been…
• CVE-2018-5098 — CVSS 9.8 (critical): A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in…
• CVE-2018-5097 — CVSS 9.8 (critical): A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by…
• CVE-2017-5438 — CVSS 9.8 (critical): A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results…
• CVE-2018-5096 — CVSS 9.8 (critical): A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash…
• CVE-2017-7778 — CVSS 9.8 (critical): A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use…
• CVE-2017-5447 — CVSS 9.1 (critical): An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could…
• CVE-2017-5465 — CVSS 9.1 (critical): An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible…
• CVE-2017-7753 — CVSS 9.1 (critical): An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This…
• CVE-2017-7758 — CVSS 9.1 (critical): An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in…
• CVE-2017-7752 — CVSS 8.8 (high): A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are…
• CVE-2017-7798 — CVSS 8.8 (high): The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the…
• CVE-2017-5436 — CVSS 8.8 (high): An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially…
• CVE-2017-5448 — CVSS 8.6 (high): An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs…
• CVE-2017-7807 — CVSS 8.1 (high): A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been…
• CVE-2017-7755 — CVSS 7.8 (high): The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This…
• CVE-2017-7814 — CVSS 7.8 (high): File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware…
• CVE-2017-5455 — CVSS 7.5 (high): The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with…
• CVE-2017-5444 — CVSS 7.5 (high): A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted…
• CVE-2017-5445 — CVSS 7.5 (high): A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This…
• CVE-2017-5449 — CVSS 7.5 (high): A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This…
• CVE-2017-5454 — CVSS 7.5 (high): A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in…
• CVE-2016-10196 — CVSS 7.5 (high): Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause…
• CVE-2017-5467 — CVSS 7.5 (high): A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This…
• CVE-2017-7754 — CVSS 7.5 (high): An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox <…
• CVE-2017-7765 — CVSS 7.5 (high): The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the…
• CVE-2017-7787 — CVSS 7.5 (high): Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content…
• CVE-2017-7803 — CVSS 7.5 (high): When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the…
• CVE-2017-7804 — CVSS 7.5 (high): The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability…
• CVE-2017-7805 — CVSS 7.5 (high): During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in…
• CVE-2017-7830 — CVSS 6.5 (medium): The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow…
• CVE-2017-5466 — CVSS 6.1 (medium): If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will…
• CVE-2017-7761 — CVSS 5.5 (medium): The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is…
• CVE-2017-7768 — CVSS 5.5 (medium): The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by…
• CVE-2017-7823 — CVSS 5.4 (medium): The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the…
• CVE-2017-5462 — CVSS 5.3 (medium): A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry…
• CVE-2018-5117 — CVSS 5.3 (medium): If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to…
• CVE-2017-7791 — CVSS 5.3 (medium): On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following…
• CVE-2017-7782 — CVSS 5.3 (medium): An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP…
• CVE-2017-7764 — CVSS 5.3 (medium): Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of…
• CVE-2017-7763 — CVSS 5.3 (medium): Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for…
• CVE-2017-7825 — CVSS 5.3 (medium): Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be…
• CVE-2017-5451 — CVSS 4.3 (medium): A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by…