Browse CVEs

CRITICAL 9.8 CVE-2024-5699 In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked w… Firefox 127.0+ Fix from $2,3002024-06-11 CRITICAL 9.8 CVE-2024-5701 Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 127.0+ Fix from $2,3002024-06-11 CRITICAL 9.8 CVE-2024-4778 Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 126.0+ Fix from $2,3002024-05-14 CRITICAL 9.8 CVE-2024-4764 Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126. Firefox 126.0+ Fix from $2,3002024-05-14 CRITICAL 9.8 CVE-2024-3863 The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other oper… Firefox 115.10 / 115.10.0+ Fix from $2,3002024-04-16 CRITICAL 9.8 CVE-2024-29943EPSS 23% An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerabi… Firefox 124.0.1+ Fix from $2,3002024-03-22 CRITICAL 9.8 CVE-2024-2615 Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 124.0+ Fix from $2,3002024-03-19 CRITICAL 9.8 CVE-2024-1554 The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Und… Firefox 123.0+ Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2023-49060 An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulne… Firefox Mobile 120.0+ Fix from $2,3002023-11-21 CRITICAL 9.8 CVE-2023-5730 Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.4 / 115.4.1+ Fix from $2,3002023-10-25 CRITICAL 9.8 CVE-2023-5731 Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 119.0+ Fix from $2,3002023-10-25 CRITICAL 9.8 CVE-2023-5168 A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially ex… Firefox 115.3 / 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5172 A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitab… Firefox 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5174 If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-af… Firefox 115.3 / 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5175 During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, lead… Firefox 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5176 Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.3 / 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-4056 Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showe… Firefox 102.14 / 115.1+ Fix from $2,3002023-08-01 CRITICAL 9.8 CVE-2023-4057 Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.1 / 116.0+ Fix from $2,3002023-08-01 CRITICAL 9.8 CVE-2023-4058 Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 116.0+ Fix from $2,3002023-08-01 CRITICAL 9.8 CVE-2023-34416 Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we… Firefox 102.12 / 114.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-34417 Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 114.0+ Fix from $2,3002023-06-19 CRITICAL 10.0 CVE-2019-25136 A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. T… Firefox 70.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-25736 An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110. Firefox 110.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-29542 A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk wi… Firefox 102.10 / 112.0+ Fix from $2,3002023-06-19 CRITICAL 9.1 CVE-2023-29534 Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusi… Firefox Focus 112.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-29531 An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *Th… Firefox 102.10 / 112.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-32216 Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs prese… Firefox 113.0+ Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2021-43529 Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird ver… Thunderbird 91.3.0+ Fix from $2,3002023-02-16 CRITICAL 9.8 CVE-2022-46882 A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6… Firefox 102.6 / 107.0+ Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-45406 If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a Base… Firefox 102.5 / 107.0+ Fix from $2,3002022-12-22