Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2013-1674
Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox E ...
CVE-2013-1674
Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
CVE-2013-1673
The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not ...
CVE-2013-1673
The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
CVE-2013-1672
The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefo ...
CVE-2013-1672
The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.
CVE-2013-1671
Mozilla Firefox before 21.0 does not properly implement the INPUT elem ...
CVE-2013-1671
Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
CVE-2013-1670
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...
CVE-2013-1670
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2013-1674 Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox E ... | CVSS2: 9.3 | 6% Низкий | около 13 лет назад |
 | CVE-2013-1674 Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video. | CVSS2: 9.3 | 6% Низкий | около 13 лет назад |
| CVE-2013-1673 The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not ... | CVSS2: 6.9 | 0% Низкий | около 13 лет назад |
| CVE-2013-1673 The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path." | CVSS2: 6.9 | 0% Низкий | около 13 лет назад |
| CVE-2013-1672 The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefo ... | CVSS2: 6.9 | 0% Низкий | около 13 лет назад |
| CVE-2013-1672 The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions. | CVSS2: 6.9 | 0% Низкий | около 13 лет назад |
| CVE-2013-1671 Mozilla Firefox before 21.0 does not properly implement the INPUT elem ... | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
| CVE-2013-1671 Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site. | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
| CVE-2013-1670 The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ... | CVSS2: 4.3 | 11% Средний | около 13 лет назад |
| CVE-2013-1670 The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site. | CVSS2: 4.3 | 11% Средний | около 13 лет назад |
Уязвимостей на страницу