Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Firefox HIGH 8.8
CVE-2016-2802

The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x b…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-2801

The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox E…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-2800

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-2799

Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ES…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-2798

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-2797

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-2796

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-2794

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-2793

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-2792

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-2791

The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-1977

The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1974

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1971

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, wh…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1970

Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1969

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers t…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 7.4
CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changin…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1959

The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1953

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Linux HIGH 8.8
CVE-2016-1952

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to …

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1950EPSS 6%

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Android CRITICAL 9.8
CVE-2016-1621EPSS 6%

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary co…

Mitigation only
Fix from $2,300 2016-03-12
Android MEDIUM 6.5
CVE-2016-0830

btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent da…

Mitigation only
Fix from $1,600 2016-03-12
Android CRITICAL 9.8
CVE-2016-0816

mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

Mitigation only
Fix from $2,300 2016-03-12
Flash Player HIGH 8.8
CVE-2016-1002EPSS 21%

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12
Flash Player HIGH 8.8
CVE-2016-0992

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12
Flash Player HIGH 8.8
CVE-2016-0989

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12
Flash Player HIGH 8.8
CVE-2016-0986

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12
Flash Player HIGH 8.8
CVE-2016-0962

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12
Flash Player HIGH 8.8
CVE-2016-0961

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…

Fix: after 20.2.2.306
Fix from $1,950 2016-03-12