Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

128129130131132133134135136137138139202420252026

Недавние уязвимости Mozilla Firefox

Количество 14 599

ubuntu логотип

CVE-2025-5020

29 дней назад

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
EPSS: Низкий
fstec логотип

BDU:2025-06031

около 1 месяца назад

Уязвимость браузера Firefox для iOS, существующая из-за некорректной работы обработчиков ms-cxh и ms-cxh-ful, позволяющая нарушителю, оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-fhgm-mxgh-gfpj

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-f333-vhwv-jvmx

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-4919

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-4919

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-4918

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2025-4918

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-4918

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-4919

около 1 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2025-5020

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139.

CVSS3: 4.3
0%
Низкий
29 дней назад
fstec логотип
BDU:2025-06031

Уязвимость браузера Firefox для iOS, существующая из-за некорректной работы обработчиков ms-cxh и ms-cxh-ful, позволяющая нарушителю, оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
0%
Низкий
около 1 месяца назад
github логотип
GHSA-fhgm-mxgh-gfpj

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 7.5
0%
Низкий
около 1 месяца назад
github логотип
GHSA-f333-vhwv-jvmx

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

CVSS3: 8.8
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 8.8
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-4918

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 7.5
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-4918

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 7.5
0%
Низкий
около 1 месяца назад
ubuntu логотип
CVE-2025-4918

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 7.5
0%
Низкий
около 1 месяца назад
ubuntu логотип
CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу


Поделиться