Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 225

nvd логотип

CVE-2023-28159

больше 2 лет назад

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-28159

больше 2 лет назад

The fullscreen notification could have been hidden on Firefox for Andr ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-25752

больше 2 лет назад

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-25752

больше 2 лет назад

When accessing throttled streams, the count of available bytes needed ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-25751

больше 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-25751

больше 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-25750

больше 2 лет назад

Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-25750

больше 2 лет назад

Under certain circumstances, a ServiceWorker's offline cache may have ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-25749

больше 2 лет назад

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-25749

больше 2 лет назад

Android applications with unpatched vulnerabilities can be launched fr ...

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-28159

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-28159

The fullscreen notification could have been hidden on Firefox for Andr ...

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25752

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25752

When accessing throttled streams, the count of available bytes needed ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25751

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25751

Sometimes, when invalidating JIT code while following an iterator, the ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25750

Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25750

Under certain circumstances, a ServiceWorker's offline cache may have ...

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched fr ...

CVSS3: 4.3
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу


Поделиться