Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 337

nvd логотип

CVE-2024-11703

больше 1 года назад

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133.

CVSS3: 5.7
EPSS: Низкий
debian логотип

CVE-2024-11702

больше 1 года назад

Copying sensitive information from Private Browsing tabs on Android, s ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-11702

больше 1 года назад

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-11701

больше 1 года назад

The incorrect domain may have been displayed in the address bar during ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2024-11701

больше 1 года назад

The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2024-11700

больше 1 года назад

Malicious websites may have been able to perform user intent confirmat ...

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2024-11700

больше 1 года назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2024-11699

больше 1 года назад

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thun ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-11699

больше 1 года назад

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-11698

больше 1 года назад

A flaw in handling fullscreen transitions may have inadvertently cause ...

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2024-11703

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133.

CVSS3: 5.7
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, s ...

CVSS3: 7.5
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 7.5
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-11701

The incorrect domain may have been displayed in the address bar during ...

CVSS3: 4.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-11701

The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 4.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-11700

Malicious websites may have been able to perform user intent confirmat ...

CVSS3: 8.1
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-11700

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-11699

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thun ...

CVSS3: 8.8
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-11699

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

CVSS3: 8.8
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently cause ...

CVSS3: 9.8
1%
Низкий
больше 1 года назад

Уязвимостей на страницу


Поделиться