Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 225
GHSA-7f9h-g35v-jfqh
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37208
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37208
When opening Diagcab files, Firefox did not warn the user that these f ...
CVE-2023-37207
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37207
A website could have obscured the fullscreen notification by using a U ...
CVE-2023-37202
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37202
Cross-compartment wrappers wrapping a scripted proxy could have caused ...
CVE-2023-37201
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37201
An attacker could have triggered a use-after-free condition when creat ...
CVE-2023-37207
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-7f9h-g35v-jfqh When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these f ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37207 A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37207 A website could have obscured the fullscreen notification by using a U ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-37201 An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад | |
CVE-2023-37201 An attacker could have triggered a use-after-free condition when creat ... | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад | |
CVE-2023-37207 A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу