Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 225

nvd логотип

CVE-2023-29549

больше 2 лет назад

Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-29549

больше 2 лет назад

Under certain circumstances, a call to the <code>bind</code> function ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-29548

больше 2 лет назад

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-29548

больше 2 лет назад

A wrong lowering instruction in the ARM64 Ion compiler resulted in a w ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-29547

больше 2 лет назад

When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-29547

больше 2 лет назад

When a secure cookie existed in the Firefox cookie jar an insecure coo ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-29544

больше 2 лет назад

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-29544

больше 2 лет назад

If multiple instances of resource exhaustion occurred at the incorrect ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-29543

больше 2 лет назад

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-29543

больше 2 лет назад

An attacker could have caused memory corruption and a potentially expl ...

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-29549

Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-29549

Under certain circumstances, a call to the <code>bind</code> function ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-29548

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-29548

A wrong lowering instruction in the ARM64 Ion compiler resulted in a w ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-29547

When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-29547

When a secure cookie existed in the Firefox cookie jar an insecure coo ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-29544

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-29544

If multiple instances of resource exhaustion occurred at the incorrect ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-29543

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-29543

An attacker could have caused memory corruption and a potentially expl ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу


Поделиться