Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 337

nvd логотип

CVE-2023-5731

почти 3 года назад

Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-5730

почти 3 года назад

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thun ...

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2023-5730

почти 3 года назад

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-5729

почти 3 года назад

A malicious web site can enter fullscreen mode while simultaneously tr ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-5729

почти 3 года назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-5728

почти 3 года назад

During garbage collection extra operations were performed on a object ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-5728

почти 3 года назад

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2023-5727

почти 3 года назад

The executable file warning was not presented when downloading .msix, ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-5727

почти 3 года назад

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-5726

почти 3 года назад

A website could have obscured the full screen notification by using th ...

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-5731

Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119.

CVSS3: 9.8
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-5730

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thun ...

CVSS3: 9.8
1%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-5730

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 9.8
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-5729

A malicious web site can enter fullscreen mode while simultaneously tr ...

CVSS3: 4.3
1%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-5729

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-5728

During garbage collection extra operations were performed on a object ...

CVSS3: 7.5
1%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-5728

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 7.5
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-5727

The executable file warning was not presented when downloading .msix, ...

CVSS3: 6.5
1%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 6.5
1%
Низкий
почти 3 года назад
debian логотип
CVE-2023-5726

A website could have obscured the full screen notification by using th ...

CVSS3: 4.3
1%
Низкий
почти 3 года назад

Уязвимостей на страницу


Поделиться