Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614720232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 501

debian логотип

CVE-2023-25748

больше 2 лет назад

By displaying a prompt with a long description, the fullscreen notific ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-25745

больше 2 лет назад

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-25745

больше 2 лет назад

Memory safety bugs present in Firefox 109. Some of these bugs showed e ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-25744

больше 2 лет назад

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-25744

больше 2 лет назад

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-25742

больше 2 лет назад

When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-25742

больше 2 лет назад

When importing a SPKI RSA public key as ECDSA P-256, the key would be ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-25741

больше 2 лет назад

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-25741

больше 2 лет назад

When dragging and dropping an image cross-origin, the image's size cou ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-25740

больше 2 лет назад

After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2023-25748

By displaying a prompt with a long description, the fullscreen notific ...

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25745

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25745

Memory safety bugs present in Firefox 109. Some of these bugs showed e ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25744

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25744

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some ...

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25742

When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25742

When importing a SPKI RSA public key as ECDSA P-256, the key would be ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size cou ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-25740

After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110.

CVSS3: 8.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу


Поделиться