Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2016-2813
Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.
CVE-2016-2812
Race condition in the get implementation in the ServiceWorkerManager c ...
CVE-2016-2812
Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
CVE-2016-2811
Use-after-free vulnerability in the ServiceWorkerInfo class in the Ser ...
CVE-2016-2811
Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
CVE-2016-2810
Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to ...
CVE-2016-2810
Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
CVE-2016-2809
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 ...
CVE-2016-2809
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
CVE-2016-2808
The watch implementation in the JavaScript engine in Mozilla Firefox b ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-2813 Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780. | CVSS3: 6.5 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2812 Race condition in the get implementation in the ServiceWorkerManager c ... | CVSS3: 7.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2812 Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site. | CVSS3: 7.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2811 Use-after-free vulnerability in the ServiceWorkerInfo class in the Ser ... | CVSS3: 8.8 | 3% Низкий | больше 10 лет назад |
| CVE-2016-2811 Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method. | CVSS3: 8.8 | 3% Низкий | больше 10 лет назад |
| CVE-2016-2810 Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to ... | CVSS3: 5 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2810 Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password. | CVSS3: 5 | 1% Низкий | больше 10 лет назад |
| CVE-2016-2809 The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 ... | CVSS3: 5.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2809 The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution. | CVSS3: 5.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-2808 The watch implementation in the JavaScript engine in Mozilla Firefox b ... | CVSS3: 7.5 | 2% Низкий | больше 10 лет назад |
Уязвимостей на страницу