Поиск уязвимостей
Количество 20
Количество 20
GHSA-fj34-jgxp-cv4f
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
CVE-2020-15663
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
CVE-2020-15663
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
CVE-2020-15663
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
CVE-2020-15663
If Firefox is installed to a user-writable directory, the Mozilla Main ...
BDU:2022-05937
Уязвимость службы Maintenance Service браузеров Mozilla Firefox, Mozilla Firefox ESR и почтового клиента Thunderbird для Windows, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями
openSUSE-SU-2020:1392-1
Security update for MozillaThunderbird
openSUSE-SU-2020:1391-1
Security update for MozillaFirefox
openSUSE-SU-2020:1384-1
Security update for MozillaFirefox
openSUSE-SU-2020:1383-1
Security update for MozillaThunderbird
SUSE-SU-2020:2563-1
Security update for MozillaFirefox
SUSE-SU-2020:2552-1
Security update for MozillaThunderbird
SUSE-SU-2020:2544-1
Security update for MozillaFirefox
SUSE-SU-2020:14489-1
Security update for MozillaFirefox
ALT-PU-2020-2722
ALT-PU-2020-2722: package `firefox-esr` update to version 78.2.0-alt1
ALT-PU-2020-2719
ALT-PU-2020-2719: package `thunderbird` update to version 78.2.1-alt1
SUSE-SU-2020:2749-1
Security update for MozillaFirefox
ALT-PU-2020-2706
ALT-PU-2020-2706: package `firefox` update to version 80.0-alt1
ALT-PU-2020-2408
ALT-PU-2020-2408: package `firefox-esr` update to version 78.0.2-alt1
ALT-PU-2019-2686
ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fj34-jgxp-cv4f If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2. | CVSS3: 8.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2020-15663 If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2. | CVSS3: 8.8 | 3% Низкий | около 6 лет назад |
 | CVE-2020-15663 If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2. | CVSS3: 8.8 | 3% Низкий | около 6 лет назад |
 | CVE-2020-15663 If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2. | CVSS3: 8.8 | 3% Низкий | около 6 лет назад |
| CVE-2020-15663 If Firefox is installed to a user-writable directory, the Mozilla Main ... | CVSS3: 8.8 | 3% Низкий | около 6 лет назад |
 | BDU:2022-05937 Уязвимость службы Maintenance Service браузеров Mozilla Firefox, Mozilla Firefox ESR и почтового клиента Thunderbird для Windows, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями | CVSS3: 8.8 | 3% Низкий | около 6 лет назад |
 | openSUSE-SU-2020:1392-1 Security update for MozillaThunderbird | около 6 лет назад | ||
| openSUSE-SU-2020:1391-1 Security update for MozillaFirefox | около 6 лет назад | ||
| openSUSE-SU-2020:1384-1 Security update for MozillaFirefox | около 6 лет назад | ||
| openSUSE-SU-2020:1383-1 Security update for MozillaThunderbird | около 6 лет назад | ||
| SUSE-SU-2020:2563-1 Security update for MozillaFirefox | около 6 лет назад | ||
| SUSE-SU-2020:2552-1 Security update for MozillaThunderbird | около 6 лет назад | ||
| SUSE-SU-2020:2544-1 Security update for MozillaFirefox | около 6 лет назад | ||
| SUSE-SU-2020:14489-1 Security update for MozillaFirefox | около 6 лет назад | ||
| ALT-PU-2020-2722 ALT-PU-2020-2722: package `firefox-esr` update to version 78.2.0-alt1 | CVSS3: 8.8 | около 6 лет назад | |
| ALT-PU-2020-2719 ALT-PU-2020-2719: package `thunderbird` update to version 78.2.1-alt1 | CVSS3: 8.8 | около 6 лет назад | |
| SUSE-SU-2020:2749-1 Security update for MozillaFirefox | около 6 лет назад | ||
| ALT-PU-2020-2706 ALT-PU-2020-2706: package `firefox` update to version 80.0-alt1 | CVSS3: 9 | около 6 лет назад | |
| ALT-PU-2020-2408 ALT-PU-2020-2408: package `firefox-esr` update to version 78.0.2-alt1 | CVSS3: 10 | больше 6 лет назад | |
| ALT-PU-2019-2686 ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1 | CVSS3: 10 | около 7 лет назад |
Уязвимостей на страницу