Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 368
CVE-2017-7799
JavaScript in the "about:webrtc" page is not sanitized properly being ...
CVE-2017-7798
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.
CVE-2017-7798
The Developer Tools feature suffers from a XUL injection vulnerability ...
CVE-2017-7797
Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox < 55.
CVE-2017-7797
Response header name interning does not have same-origin protections a ...
CVE-2017-7796
On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file named "update.log" instead of the one intended. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Firefox < 55.
CVE-2017-7796
On Windows systems, the logger run by the Windows updater deletes the ...
CVE-2017-7794
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.
CVE-2017-7794
On Linux systems, if the content process is compromised, the sandbox b ...
CVE-2017-7793
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2017-7799 JavaScript in the "about:webrtc" page is not sanitized properly being ... | CVSS3: 6.1 | 1% Низкий | около 8 лет назад |
 | CVE-2017-7798 The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55. | CVSS3: 8.8 | 2% Низкий | около 8 лет назад |
| CVE-2017-7798 The Developer Tools feature suffers from a XUL injection vulnerability ... | CVSS3: 8.8 | 2% Низкий | около 8 лет назад |
| CVE-2017-7797 Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox < 55. | CVSS3: 7.5 | 1% Низкий | около 8 лет назад |
| CVE-2017-7797 Response header name interning does not have same-origin protections a ... | CVSS3: 7.5 | 1% Низкий | около 8 лет назад |
| CVE-2017-7796 On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file named "update.log" instead of the one intended. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Firefox < 55. | CVSS3: 4.7 | 0% Низкий | около 8 лет назад |
| CVE-2017-7796 On Windows systems, the logger run by the Windows updater deletes the ... | CVSS3: 4.7 | 0% Низкий | около 8 лет назад |
| CVE-2017-7794 On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55. | CVSS3: 7.8 | 0% Низкий | около 8 лет назад |
| CVE-2017-7794 On Linux systems, if the content process is compromised, the sandbox b ... | CVSS3: 7.8 | 0% Низкий | около 8 лет назад |
| CVE-2017-7793 A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4. | CVSS3: 9.8 | 2% Низкий | около 8 лет назад |
Уязвимостей на страницу