Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314420232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 151

fstec логотип

BDU:2025-06226

6 месяцев назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с передачей конфиденциальной информации открытым текстом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-7mfw-wgr7-m3jg

6 месяцев назад

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-5020

6 месяцев назад

Opening maliciously-crafted URLs in Firefox from other apps such as Sa ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-5020

6 месяцев назад

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2025-5020

6 месяцев назад

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
EPSS: Низкий
fstec логотип

BDU:2025-06031

6 месяцев назад

Уязвимость браузера Firefox для iOS, существующая из-за некорректной работы обработчиков ms-cxh и ms-cxh-ful, позволяющая нарушителю, оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-fhgm-mxgh-gfpj

6 месяцев назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-f333-vhwv-jvmx

6 месяцев назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-4919

6 месяцев назад

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-4919

6 месяцев назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
fstec логотип
BDU:2025-06226

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с передачей конфиденциальной информации открытым текстом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 7.5
0%
Низкий
6 месяцев назад
github логотип
GHSA-7mfw-wgr7-m3jg

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-5020

Opening maliciously-crafted URLs in Firefox from other apps such as Sa ...

CVSS3: 4.3
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2025-5020

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2025-5020

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-06031

Уязвимость браузера Firefox для iOS, существующая из-за некорректной работы обработчиков ms-cxh и ms-cxh-ful, позволяющая нарушителю, оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
0%
Низкий
6 месяцев назад
github логотип
GHSA-fhgm-mxgh-gfpj

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 7.5
0%
Низкий
6 месяцев назад
github логотип
GHSA-f333-vhwv-jvmx

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 8.8
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 8.8
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
0%
Низкий
6 месяцев назад

Уязвимостей на страницу


Поделиться