Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 225
CVE-2023-29549
Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2023-29549
Under certain circumstances, a call to the <code>bind</code> function ...
CVE-2023-29548
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29548
A wrong lowering instruction in the ARM64 Ion compiler resulted in a w ...
CVE-2023-29547
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2023-29547
When a secure cookie existed in the Firefox cookie jar an insecure coo ...
CVE-2023-29544
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2023-29544
If multiple instances of resource exhaustion occurred at the incorrect ...
CVE-2023-29543
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2023-29543
An attacker could have caused memory corruption and a potentially expl ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-29549 Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29549 Under certain circumstances, a call to the <code>bind</code> function ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29548 A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29548 A wrong lowering instruction in the ARM64 Ion compiler resulted in a w ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29547 When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29547 When a secure cookie existed in the Firefox cookie jar an insecure coo ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29544 If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29544 If multiple instances of resource exhaustion occurred at the incorrect ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29543 An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-29543 An attacker could have caused memory corruption and a potentially expl ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу