Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2016-2824
The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
CVE-2016-2822
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow rem ...
CVE-2016-2822
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.
CVE-2016-2821
Use-after-free vulnerability in the mozilla::dom::Element class in Moz ...
CVE-2016-2821
Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.
CVE-2016-2819
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ...
CVE-2016-2819
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
CVE-2016-2818
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
CVE-2016-2818
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2016-2815
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-2824 The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array. | CVSS3: 8.8 | 2% Низкий | около 10 лет назад |
| CVE-2016-2822 Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow rem ... | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
| CVE-2016-2822 Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu. | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
| CVE-2016-2821 Use-after-free vulnerability in the mozilla::dom::Element class in Moz ... | CVSS3: 7.5 | 3% Низкий | около 10 лет назад |
| CVE-2016-2821 Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor. | CVSS3: 7.5 | 3% Низкий | около 10 лет назад |
| CVE-2016-2819 Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ... | CVSS3: 8.8 | 24% Средний | около 10 лет назад |
| CVE-2016-2819 Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element. | CVSS3: 8.8 | 24% Средний | около 10 лет назад |
| CVE-2016-2818 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-2818 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-2815 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
Уязвимостей на страницу