Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2023-6864
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thun ...
CVE-2023-6864
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
CVE-2023-6863
The `ShutdownObserver()` was susceptible to potentially undefined beha ...
CVE-2023-6863
The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
CVE-2023-6861
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buff ...
CVE-2023-6861
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
CVE-2023-6860
The `VideoBridge` allowed any content process to use textures produced ...
CVE-2023-6860
The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
CVE-2023-6859
A use-after-free condition affected TLS socket creation when under mem ...
CVE-2023-6859
A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2023-6864 Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thun ... | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-6864 Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6863 The `ShutdownObserver()` was susceptible to potentially undefined beha ... | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6863 The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6861 The `nsWindow::PickerOpen(void)` method was susceptible to a heap buff ... | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6861 The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6860 The `VideoBridge` allowed any content process to use textures produced ... | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6860 The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6859 A use-after-free condition affected TLS socket creation when under mem ... | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6859 A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу