Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 673
GHSA-qmcg-gf85-vjv7
Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-wfpq-7pgh-wwvj
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-v328-g523-3h87
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-v52q-fx4j-2fmf
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-mh9g-c96g-23jc
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-37q5-qg7q-c8f4
Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
GHSA-2gp7-2525-93fm
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
GHSA-67f4-mqxj-f332
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
GHSA-xppv-6m94-c745
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
GHSA-63pj-98v2-jx96
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-qmcg-gf85-vjv7 Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 9.8 | 0% Низкий | 29 дней назад |
| GHSA-wfpq-7pgh-wwvj Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 7.5 | 0% Низкий | 29 дней назад |
| GHSA-v328-g523-3h87 Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 7.5 | 0% Низкий | 29 дней назад |
| GHSA-v52q-fx4j-2fmf Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 8.1 | 0% Низкий | 29 дней назад |
| GHSA-mh9g-c96g-23jc Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 9.8 | 0% Низкий | 29 дней назад |
| GHSA-37q5-qg7q-c8f4 Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 8.1 | 0% Низкий | 29 дней назад |
| GHSA-2gp7-2525-93fm Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1. | CVSS3: 8.8 | 0% Низкий | 29 дней назад |
| GHSA-67f4-mqxj-f332 Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1. | CVSS3: 4.3 | 0% Низкий | 29 дней назад |
| GHSA-xppv-6m94-c745 Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1. | CVSS3: 5.4 | 0% Низкий | 29 дней назад |
| GHSA-63pj-98v2-jx96 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. | CVSS3: 5.4 | 0% Низкий | 29 дней назад |
Уязвимостей на страницу