Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 337

nvd логотип

CVE-2022-29910

больше 3 лет назад

When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 100.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2022-29909

больше 3 лет назад

Documents in deeply-nested cross-origin browsing contexts could have o ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2022-29909

больше 3 лет назад

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2022-28289

больше 3 лет назад

Mozilla developers and community members Nika Layzell, Andrew McCreigh ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2022-28289

больше 3 лет назад

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2022-28288

больше 3 лет назад

Mozilla developers and community members Randell Jesup, Sebastian Heng ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2022-28288

больше 3 лет назад

Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 99.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2022-28287

больше 3 лет назад

In unusual circumstances, selecting text could cause text selection ca ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2022-28287

больше 3 лет назад

In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2022-28286

больше 3 лет назад

Due to a layout change, iframe contents could have been rendered outsi ...

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2022-29910

When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 100.

CVSS3: 6.1
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-29909

Documents in deeply-nested cross-origin browsing contexts could have o ...

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-29909

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-28289

Mozilla developers and community members Nika Layzell, Andrew McCreigh ...

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-28289

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-28288

Mozilla developers and community members Randell Jesup, Sebastian Heng ...

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-28288

Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 99.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-28287

In unusual circumstances, selecting text could cause text selection ca ...

CVSS3: 6.5
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-28287

In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99.

CVSS3: 6.5
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-28286

Due to a layout change, iframe contents could have been rendered outsi ...

CVSS3: 5.4
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу


Поделиться