Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
BDU:2016-00970
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию
BDU:2015-12241
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVE-2015-7200
The CryptoKey interface implementation in Mozilla Firefox before 42.0 ...
CVE-2015-7200
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
CVE-2015-7199
The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interp ...
CVE-2015-7199
The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
CVE-2015-7198
Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in ...
CVE-2015-7198
Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.
CVE-2015-7197
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperl ...
CVE-2015-7197
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | BDU:2016-00970 Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию | CVSS2: 5 | 2% Низкий | больше 10 лет назад |
| BDU:2015-12241 Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие | CVSS2: 10 | 5% Низкий | больше 10 лет назад |
| CVE-2015-7200 The CryptoKey interface implementation in Mozilla Firefox before 42.0 ... | CVSS2: 7.5 | 2% Низкий | почти 11 лет назад |
 | CVE-2015-7200 The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key. | CVSS2: 7.5 | 2% Низкий | почти 11 лет назад |
| CVE-2015-7199 The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interp ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7199 The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document. | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7198 Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in ... | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7198 Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data. | CVSS2: 7.5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7197 Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperl ... | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-7197 Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code. | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
Уязвимостей на страницу