Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 337

debian логотип

CVE-2016-1972

больше 10 лет назад

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows mig ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-1972

больше 10 лет назад

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-1971

больше 10 лет назад

The I420VideoFrame::CreateFrame function in the WebRTC implementation ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-1971

больше 10 лет назад

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-1970

больше 10 лет назад

Integer underflow in the srtp_unprotect function in the WebRTC impleme ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-1970

больше 10 лет назад

Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-1969

больше 10 лет назад

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Fi ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-1969

больше 10 лет назад

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-1968

больше 10 лет назад

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, a ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-1968

больше 10 лет назад

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2016-1972

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows mig ...

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-1972

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-1971

The I420VideoFrame::CreateFrame function in the WebRTC implementation ...

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-1971

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-1970

Integer underflow in the srtp_unprotect function in the WebRTC impleme ...

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-1970

Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-1969

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Fi ...

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-1969

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-1968

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, a ...

CVSS3: 8.8
4%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-1968

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.

CVSS3: 8.8
4%
Низкий
больше 10 лет назад

Уязвимостей на страницу


Поделиться