Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
BDU:2020-05846
Уязвимость механизма подмены адресной строки через взаимодействие пользователя с адресной строкой и событием «onblur» браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю проводить спуфинг-атаки
CVE-2016-2820
The Firefox Health Reports (aka FHR or about:healthreport) feature in ...
CVE-2016-2820
The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
CVE-2016-2817
The WebExtension sandbox feature in browser/components/extensions/ext- ...
CVE-2016-2817
The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
CVE-2016-2816
Mozilla Firefox before 46.0 allows remote attackers to bypass the Cont ...
CVE-2016-2816
Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
CVE-2016-2814
Heap-based buffer overflow in the stagefright::SampleTable::parseSampl ...
CVE-2016-2814
Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
CVE-2016-2813
Mozilla Firefox before 46.0 on Android does not properly restrict Java ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | BDU:2020-05846 Уязвимость механизма подмены адресной строки через взаимодействие пользователя с адресной строкой и событием «onblur» браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю проводить спуфинг-атаки | CVSS3: 4.3 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2820 The Firefox Health Reports (aka FHR or about:healthreport) feature in ... | CVSS3: 4.3 | 1% Низкий | больше 10 лет назад |
 | CVE-2016-2820 The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element. | CVSS3: 4.3 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2817 The WebExtension sandbox feature in browser/components/extensions/ext- ... | CVSS3: 5.4 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2817 The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL. | CVSS3: 5.4 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2816 Mozilla Firefox before 46.0 allows remote attackers to bypass the Cont ... | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2816 Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type. | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2814 Heap-based buffer overflow in the stagefright::SampleTable::parseSampl ... | CVSS3: 8.8 | 4% Низкий | больше 10 лет назад |
| CVE-2016-2814 Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table. | CVSS3: 8.8 | 4% Низкий | больше 10 лет назад |
| CVE-2016-2813 Mozilla Firefox before 46.0 on Android does not properly restrict Java ... | CVSS3: 6.5 | 1% Низкий | больше 10 лет назад |
Уязвимостей на страницу