Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 18 439
GHSA-38rp-mx4j-w7p4
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
GHSA-45ch-w6fw-c7j7
Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-5pwm-rr4f-fh76
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
GHSA-8ffm-wqc4-j2qw
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.
GHSA-6v29-2pf5-53r5
Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-89c3-7xfj-w7mh
Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-6chf-cfvh-wmv2
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
GHSA-789r-f72w-5r5j
Other issue in the DevTools component. This vulnerability was fixed in Firefox 157.
GHSA-7f52-cp5w-7wmh
Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
GHSA-646m-ffpr-629f
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-38rp-mx4j-w7p4 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-45ch-w6fw-c7j7 Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| GHSA-5pwm-rr4f-fh76 Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17. | CVSS3: 9.6 | 0% Низкий | около 1 месяца назад |
| GHSA-8ffm-wqc4-j2qw Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-6v29-2pf5-53r5 Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 5.4 | 0% Низкий | около 1 месяца назад |
| GHSA-89c3-7xfj-w7mh Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| GHSA-6chf-cfvh-wmv2 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
| GHSA-789r-f72w-5r5j Other issue in the DevTools component. This vulnerability was fixed in Firefox 157. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
| GHSA-7f52-cp5w-7wmh Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-646m-ffpr-629f Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17. | CVSS3: 9.6 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу