OPENSUSE-SU-2025:15516-1 MozillaFirefox-142.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-142.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the absence of a “Secure” flag in HTTPS session cookie files. This allows attackers to compromise the privacy and integrity of the protected information.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the absence of a “Secure” flag in the HTTPS session cookie files. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the disclosure of information through debugging registration files, allowing an intruder to gain unauthorized access to protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve the exploitation of registration files for debugging purposes. Exploiting these vulnerabilities allows a malicious actor to gain unauthorized access to protected information from a remote location...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox browsers and the Mozilla Thunderbird email client arises from the execution of operations beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browsers and the Mozilla Thunderbird email client relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of Mozilla Firefox and the Thunderbird email client, related to information representation errors in the user interface, allow attackers to cause service failures.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the integrity of protected information.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

The vulnerability in the JavaScript Engine component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

ROS-20250827-08

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service due to out-of-memory in the Graphics: WebRender component...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-26893)

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A code execution vulnerability exists in multiple Mozilla products, which can be...

Mozilla Firefox for Android Security Bypass Vulnerability (CNVD-2025-19559)

Mozilla Firefox for Android is a web browser designed for Android devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for Android prior to version 141, which stems from improper truncation of URL display in the address bar and can be exploited by...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-26894)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

Multiple Mozilla Product Spoofing Vulnerabilities (CNVD-2025-26892)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox web browser. A spoofing vulnerability exists in several Mozilla products and is caused due to an error in the address bar component. An attacker coul...

Mozilla Firefox for iOS Denial of Service Vulnerability (CNVD-2025-19565)

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A denial of service vulnerability exists in Mozilla Firefox for iOS prior to version 142, which can be exploited by attackers to cause a denial of service...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2025-19562)

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which stems from a sandboxed iframe that may bypass restrictions on downloading files to the device. An...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2025-19564)

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which stems from a QR scanner that may allow arbitrary websites to be opened. An attacker could exploit the...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367 POC Usage bash python poc.py mal.pdf "a...

CVE-2025-55030

Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks. This vulnerability was fixed in Firefox for iOS 142...