Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 220

nvd логотип

CVE-2024-2616

больше 1 года назад

To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.

CVSS3: 2.7
EPSS: Низкий
debian логотип

CVE-2024-2616

больше 1 года назад

To harden ICU against exploitation, the behavior for out-of-memory con ...

CVSS3: 2.7
EPSS: Низкий
nvd логотип

CVE-2024-2615

больше 1 года назад

Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2024-2615

больше 1 года назад

Memory safety bugs present in Firefox 123. Some of these bugs showed e ...

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2024-2614

больше 1 года назад

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-2614

больше 1 года назад

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thun ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-2613

больше 1 года назад

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox < 124.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-2613

больше 1 года назад

Data was not properly sanitized when decoding a QUIC ACK frame; this c ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-2612

больше 1 года назад

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2024-2612

больше 1 года назад

If an attacker could find a way to trigger a particular code path in ` ...

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2024-2616

To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.

CVSS3: 2.7
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-2616

To harden ICU against exploitation, the behavior for out-of-memory con ...

CVSS3: 2.7
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-2615

Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124.

CVSS3: 9.8
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-2615

Memory safety bugs present in Firefox 123. Some of these bugs showed e ...

CVSS3: 9.8
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-2614

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.8
2%
Низкий
больше 1 года назад
debian логотип
CVE-2024-2614

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thun ...

CVSS3: 8.8
2%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-2613

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox < 124.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-2613

Data was not properly sanitized when decoding a QUIC ACK frame; this c ...

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-2612

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.1
2%
Низкий
больше 1 года назад
debian логотип
CVE-2024-2612

If an attacker could find a way to trigger a particular code path in ` ...

CVSS3: 8.1
2%
Низкий
больше 1 года назад

Уязвимостей на страницу


Поделиться