Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 18 439
GHSA-g938-8mrh-4gqq
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157.
GHSA-j53f-3p69-9c6v
Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-gggx-8wj9-87fx
Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-jqcr-9p6m-338j
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-gr8j-74mg-qjgj
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
GHSA-hccq-gj23-w7rq
Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
GHSA-mw76-22g7-fw96
Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
GHSA-qhwv-m98q-4j27
Denial-of-service in the Networking component. This vulnerability was fixed in Firefox 157.
GHSA-q9fp-c34q-3gpp
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
GHSA-p8r8-rmpf-jhgg
Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-g938-8mrh-4gqq Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-j53f-3p69-9c6v Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-gggx-8wj9-87fx Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| GHSA-jqcr-9p6m-338j Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-gr8j-74mg-qjgj Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-hccq-gj23-w7rq Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. | CVSS3: 9.6 | 0% Низкий | около 1 месяца назад |
| GHSA-mw76-22g7-fw96 Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 9.6 | 0% Низкий | около 1 месяца назад |
| GHSA-qhwv-m98q-4j27 Denial-of-service in the Networking component. This vulnerability was fixed in Firefox 157. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| GHSA-q9fp-c34q-3gpp Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| GHSA-p8r8-rmpf-jhgg Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу