Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 225

nvd логотип

CVE-2023-3482

больше 2 лет назад

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-3482

больше 2 лет назад

When Firefox is configured to block storage of all cookies, it was sti ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-37212

больше 2 лет назад

Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-37212

больше 2 лет назад

Memory safety bugs present in Firefox 114. Some of these bugs showed e ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-37211

больше 2 лет назад

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-37211

больше 2 лет назад

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thu ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-37210

больше 2 лет назад

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-37210

больше 2 лет назад

A website could prevent a user from exiting full-screen mode via alert ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-37209

больше 2 лет назад

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-37209

больше 2 лет назад

A use-after-free condition existed in `NotifyOnHistoryReload` where a ...

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was sti ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37212

Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37212

Memory safety bugs present in Firefox 114. Some of these bugs showed e ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37211

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37211

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thu ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37210

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37210

A website could prevent a user from exiting full-screen mode via alert ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37209

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37209

A use-after-free condition existed in `NotifyOnHistoryReload` where a ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу


Поделиться