Browse CVEs

HIGH 8.8 CVE-2018-12375 Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… Firefox 62.0+ Fix from $1,9502018-10-18 CRITICAL 9.8 CVE-2018-5151 Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 60.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5126 Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 59.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5090 Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox after 57.0.4 Fix from $2,3002018-06-11 HIGH 8.8 CVE-2017-7845 A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due … Firefox 52.5.2 / 57.0.2+ Fix from $1,9502018-06-11 HIGH 7.5 CVE-2018-5093EPSS 20% A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulner… Firefox after 57.0.4 Fix from $1,9502018-06-11 HIGH 7.5 CVE-2018-5094EPSS 15% A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now un… Firefox after 57.0.4 Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2017-7827 Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox after 56.0.2 Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7811 Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7778EPSS 5% A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninit… Firefox 1.3.10 / 52.2.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7780 Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5471 Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 54.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5413 A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and Thunderbird < 52. Firefox 52.0+ Fix from $2,3002018-06-11 HIGH 7.5 CVE-2017-5406 A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. … Firefox 52.0+ Fix from $1,9502018-06-11 HIGH 7.5 CVE-2017-5412 A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox < 52 and Thunderbird … Firefox 52.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2017-5392 Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruptio… Firefox 51.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5399 Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 52.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that wi… Firefox 45.7.0 / 51.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5374 Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that… Firefox 51.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5377 A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This … Firefox 51.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2016-9080 Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort th… Firefox 50.1+ Fix from $2,3002018-06-11 HIGH 7.5 CVE-2016-9066EPSS 12% A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vul… Firefox 45.5.0 / 50.0+ Fix from $1,9502018-06-11 HIGH 7.5 CVE-2016-9894EPSS 5% A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potential… Firefox 50.1+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2016-5289 Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 50.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2016-5290 Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with… Firefox 45.5.0 / 50.0+ Fix from $2,3002018-06-11 HIGH 7.5 CVE-2016-5296 A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulne… Firefox 45.5.0 / 50.0+ Fix from $1,9502018-06-11 HIGH 7.8 CVE-2017-11695 Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attac… Network Security Services No fix yet Fix from $1,9502017-12-27 HIGH 7.8 CVE-2017-11696 Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent atta… Network Security Services No fix yet Fix from $1,9502017-12-27 HIGH 7.8 CVE-2017-11697 The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (fl… Network Security Services No fix yet Fix from $1,9502017-12-27 HIGH 7.8 CVE-2017-11698 Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent att… Network Security Services No fix yet Fix from $1,9502017-12-27