Browse CVEs

CRITICAL 9.8 CVE-2024-9402 Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we p… Firefox 128.3.0 / 131.0+ Fix from $2,3002024-10-01 HIGH 8.8 CVE-2024-9400 A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compi… Firefox 128.3.0 / 131.0+ Fix from $1,9502024-10-01 HIGH 7.3 CVE-2024-9403 Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 131.0+ Fix from $1,9502024-10-01 HIGH 8.8 CVE-2024-9396 It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory cor… Firefox 128.3.0 / 131.0+ Fix from $1,9502024-10-01 CRITICAL 9.8 CVE-2024-8389 Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox Mitigation only Fix from $2,3002024-09-03 CRITICAL 9.8 CVE-2024-8387 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we p… Firefox Mitigation only Fix from $2,3002024-09-03 HIGH 8.1 CVE-2024-3864 Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that… Firefox 115.10.0 / 125.0+ Fix from $1,9502024-04-16 HIGH 8.1 CVE-2024-3865 Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 125.0+ Fix from $1,9502024-04-16 HIGH 8.1 CVE-2024-1553 Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.8.0 / 123.0+ Fix from $1,9502024-02-20 HIGH 7.5 CVE-2024-0744 In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerabilit… Firefox 122.0+ Fix from $1,9502024-01-23 CRITICAL 9.8 CVE-2022-31747 Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox … Firefox 91.10 / 101+ Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-31748 Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in … Firefox 101+ Fix from $2,3002022-12-22 HIGH 8.8 CVE-2022-31740 On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable cras… Firefox 91.10 / 101.0+ Fix from $1,9502022-12-22 HIGH 7.5 CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and u… Firefox 60.8.0 / 68.0+ Fix from $1,9502019-07-23 HIGH 8.8 CVE-2019-9810EPSS 30% Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This v… Firefox 60.6.1 / 66.0.1+ Fix from $1,9502019-04-26 MEDIUM 5.9 CVE-2019-9793 A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. Th… Firefox 60.6 / 66.0+ Fix from $1,6002019-04-26 HIGH 8.8 CVE-2017-7773 Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-15 HIGH 8.8 CVE-2017-7777 Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-15 HIGH 8.8 CVE-2017-7772 Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-12 CRITICAL 9.8 CVE-2018-12405 Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence o… Firefox 60.4.0 / 64.0+ Fix from $2,3002019-02-28 CRITICAL 9.8 CVE-2018-12407 A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBu… Firefox 64.0+ Fix from $2,3002019-02-28 CRITICAL 9.8 CVE-2018-18493 A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bi… Firefox 60.4.0 / 64.0+ Fix from $2,3002019-02-28 HIGH 8.8 CVE-2018-12406 Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption a… Firefox 64.0+ Fix from $1,9502019-02-28 CRITICAL 9.8 CVE-2018-12390 Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence o… Firefox 60.3.0 / 63.0+ Fix from $2,3002019-02-28 HIGH 8.8 CVE-2018-12388 Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption a… Firefox 63.0+ Fix from $1,9502019-02-28 HIGH 8.8 CVE-2018-12389 Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corrup… Firefox 60.3.0+ Fix from $1,9502019-02-28 CRITICAL 9.8 CVE-2018-18501 Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence o… Firefox 60.5 / 65.0+ Fix from $2,3002019-02-05 CRITICAL 9.8 CVE-2018-18502 Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption a… Firefox 65.0+ Fix from $2,3002019-02-05 HIGH 8.8 CVE-2018-18503 When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some… Firefox 65.0+ Fix from $1,9502019-02-05 CRITICAL 9.8 CVE-2018-5186 Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… Firefox 61.0+ Fix from $2,3002018-10-18