Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 225

github логотип

GHSA-7f9h-g35v-jfqh

больше 2 лет назад

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2023-37208

больше 2 лет назад

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2023-37208

больше 2 лет назад

When opening Diagcab files, Firefox did not warn the user that these f ...

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2023-37207

больше 2 лет назад

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-37207

больше 2 лет назад

A website could have obscured the fullscreen notification by using a U ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-37202

больше 2 лет назад

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-37202

больше 2 лет назад

Cross-compartment wrappers wrapping a scripted proxy could have caused ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-37201

больше 2 лет назад

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-37201

больше 2 лет назад

An attacker could have triggered a use-after-free condition when creat ...

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2023-37207

больше 2 лет назад

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
github логотип
GHSA-7f9h-g35v-jfqh

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 7.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 7.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these f ...

CVSS3: 7.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37207

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37207

A website could have obscured the fullscreen notification by using a U ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37202

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37202

Cross-compartment wrappers wrapping a scripted proxy could have caused ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-37201

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 8.8
1%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-37201

An attacker could have triggered a use-after-free condition when creat ...

CVSS3: 8.8
1%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2023-37207

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу


Поделиться