Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2016-2838
Heap-based buffer overflow in the nsBidi::BracketData::AddOpening func ...
CVE-2016-2838
Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.
CVE-2016-2837
Heap-based buffer overflow in the ClearKey Content Decryption Module ( ...
CVE-2016-2837
Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.
CVE-2016-2836
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
CVE-2016-2836
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.
CVE-2016-2835
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
CVE-2016-2835
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2016-2830
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve ...
CVE-2016-2830
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2016-2838 Heap-based buffer overflow in the nsBidi::BracketData::AddOpening func ... | CVSS3: 8.8 | 5% Низкий | около 10 лет назад |
 | CVE-2016-2838 Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document. | CVSS3: 8.8 | 5% Низкий | около 10 лет назад |
| CVE-2016-2837 Heap-based buffer overflow in the ClearKey Content Decryption Module ( ... | CVSS3: 6.3 | 5% Низкий | около 10 лет назад |
| CVE-2016-2837 Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass. | CVSS3: 6.3 | 5% Низкий | около 10 лет назад |
| CVE-2016-2836 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
| CVE-2016-2836 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors. | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
| CVE-2016-2835 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
| CVE-2016-2835 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
| CVE-2016-2830 Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve ... | CVSS3: 4.3 | 1% Низкий | около 10 лет назад |
| CVE-2016-2830 Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses. | CVSS3: 4.3 | 1% Низкий | около 10 лет назад |
Уязвимостей на страницу