Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 501
CVE-2023-25748
By displaying a prompt with a long description, the fullscreen notific ...
CVE-2023-25745
Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.
CVE-2023-25745
Memory safety bugs present in Firefox 109. Some of these bugs showed e ...
CVE-2023-25744
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.
CVE-2023-25744
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some ...
CVE-2023-25742
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-25742
When importing a SPKI RSA public key as ECDSA P-256, the key would be ...
CVE-2023-25741
When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110.
CVE-2023-25741
When dragging and dropping an image cross-origin, the image's size cou ...
CVE-2023-25740
After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-25748 By displaying a prompt with a long description, the fullscreen notific ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25745 Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25745 Memory safety bugs present in Firefox 109. Some of these bugs showed e ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25744 Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25744 Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25742 When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25742 When importing a SPKI RSA public key as ECDSA P-256, the key would be ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25741 When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25741 When dragging and dropping an image cross-origin, the image's size cou ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
CVE-2023-25740 After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу