Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
GHSA-7f9h-g35v-jfqh
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
GHSA-jpg7-857p-mpqg
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
GHSA-75qj-fcp3-j9w2
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37208
When opening Diagcab files, Firefox did not warn the user that these f ...
CVE-2023-37208
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37207
A website could have obscured the fullscreen notification by using a U ...
CVE-2023-37207
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37202
Cross-compartment wrappers wrapping a scripted proxy could have caused ...
CVE-2023-37202
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
CVE-2023-37201
An attacker could have triggered a use-after-free condition when creat ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-7f9h-g35v-jfqh When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
| GHSA-jpg7-857p-mpqg A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
| GHSA-75qj-fcp3-j9w2 An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these f ... | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
 | CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
| CVE-2023-37207 A website could have obscured the fullscreen notification by using a U ... | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
| CVE-2023-37207 A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
| CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused ... | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| CVE-2023-37201 An attacker could have triggered a use-after-free condition when creat ... | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу