Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2016-5277
Use-after-free vulnerability in the nsRefreshDriver::Tick function in ...
CVE-2016-5277
Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.
CVE-2016-5276
Use-after-free vulnerability in the mozilla::a11y::DocAccessible::Proc ...
CVE-2016-5276
Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute.
CVE-2016-5275
Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeede ...
CVE-2016-5275
Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
CVE-2016-5274
Use-after-free vulnerability in the nsFrameManager::CaptureFrameState ...
CVE-2016-5274
Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation.
CVE-2016-5273
The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the ...
CVE-2016-5273
The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2016-5277 Use-after-free vulnerability in the nsRefreshDriver::Tick function in ... | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
 | CVE-2016-5277 Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation. | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
| CVE-2016-5276 Use-after-free vulnerability in the mozilla::a11y::DocAccessible::Proc ... | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
| CVE-2016-5276 Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute. | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
| CVE-2016-5275 Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeede ... | CVSS3: 8.8 | 3% Низкий | почти 10 лет назад |
| CVE-2016-5275 Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering. | CVSS3: 8.8 | 3% Низкий | почти 10 лет назад |
| CVE-2016-5274 Use-after-free vulnerability in the nsFrameManager::CaptureFrameState ... | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
| CVE-2016-5274 Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation. | CVSS3: 9.8 | 4% Низкий | почти 10 лет назад |
| CVE-2016-5273 The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the ... | CVSS3: 8.8 | 2% Низкий | почти 10 лет назад |
| CVE-2016-5273 The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site. | CVSS3: 8.8 | 2% Низкий | почти 10 лет назад |
Уязвимостей на страницу