Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2015-4509
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
CVE-2015-4508
Mozilla Firefox before 41.0, when reader mode is enabled, allows remot ...
CVE-2015-4508
Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
CVE-2015-4507
The SavedStacks class in the JavaScript implementation in Mozilla Fire ...
CVE-2015-4507
The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.
CVE-2015-4506
Buffer overflow in the vp9_init_context_buffers function in libvpx, as ...
CVE-2015-4506
Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
CVE-2015-4505
updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before ...
CVE-2015-4505
updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.
CVE-2015-4504
The lut_inverse_interp16 function in the QCMS library in Mozilla Firef ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-4509 Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176. | CVSS2: 7.5 | 6% Низкий | почти 11 лет назад |
| CVE-2015-4508 Mozilla Firefox before 41.0, when reader mode is enabled, allows remot ... | CVSS2: 2.6 | 2% Низкий | почти 11 лет назад |
| CVE-2015-4508 Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site. | CVSS2: 2.6 | 2% Низкий | почти 11 лет назад |
| CVE-2015-4507 The SavedStacks class in the JavaScript implementation in Mozilla Fire ... | CVSS2: 5.1 | 3% Низкий | почти 11 лет назад |
| CVE-2015-4507 The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site. | CVSS2: 5.1 | 3% Низкий | почти 11 лет назад |
| CVE-2015-4506 Buffer overflow in the vp9_init_context_buffers function in libvpx, as ... | CVSS2: 6.8 | 5% Низкий | почти 11 лет назад |
| CVE-2015-4506 Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file. | CVSS2: 6.8 | 5% Низкий | почти 11 лет назад |
| CVE-2015-4505 updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before ... | CVSS2: 6.6 | 0% Низкий | почти 11 лет назад |
| CVE-2015-4505 updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service. | CVSS2: 6.6 | 0% Низкий | почти 11 лет назад |
| CVE-2015-4504 The lut_inverse_interp16 function in the QCMS library in Mozilla Firef ... | CVSS2: 6.4 | 3% Низкий | почти 11 лет назад |
Уязвимостей на страницу