Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 225
CVE-2023-28159
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
CVE-2023-28159
The fullscreen notification could have been hidden on Firefox for Andr ...
CVE-2023-25752
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
CVE-2023-25752
When accessing throttled streams, the count of available bytes needed ...
CVE-2023-25751
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
CVE-2023-25751
Sometimes, when invalidating JIT code while following an iterator, the ...
CVE-2023-25750
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.
CVE-2023-25750
Under certain circumstances, a ServiceWorker's offline cache may have ...
CVE-2023-25749
Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111.
CVE-2023-25749
Android applications with unpatched vulnerabilities can be launched fr ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-28159 The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-28159 The fullscreen notification could have been hidden on Firefox for Andr ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25752 When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25752 When accessing throttled streams, the count of available bytes needed ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25751 Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25751 Sometimes, when invalidating JIT code while following an iterator, the ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25750 Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25750 Under certain circumstances, a ServiceWorker's offline cache may have ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25749 Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25749 Android applications with unpatched vulnerabilities can be launched fr ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу