Browse CVEs

HIGH 8.8 CVE-2016-1959 The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-… Firefox after 44.0.2 Fix from $1,9502016-03-13 HIGH 8.8 CVE-2016-1953 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory… Firefox after 44.0.2 Fix from $1,9502016-03-13 HIGH 8.8 CVE-2016-1950 Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox… Firefox after 44.0.2 Fix from $1,9502016-03-13 CRITICAL 9.8 CVE-2016-1946EPSS 6% The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operatio… Firefox after 43.0.4 Fix from $2,3002016-01-31 CRITICAL 9.8 CVE-2016-1944 The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of servic… Firefox No fix yet Fix from $2,3002016-01-31 CRITICAL 10.0 CVE-2016-1931EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory… Firefox after 43.0.4 Fix from $2,3002016-01-31 CRITICAL 9.8 CVE-2016-1930EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to … Firefox after 43.0.4 Fix from $2,3002016-01-31 HIGH 10.0 CVE-2015-7221 Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause … Firefox after 42.0 Fix from $1,9502015-12-16 HIGH 10.0 CVE-2015-7220 Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of… Firefox after 42.0 Fix from $1,9502015-12-16 HIGH 10.0 CVE-2015-7203 Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allo… Firefox after 42.0 Fix from $1,9502015-12-16 HIGH 10.0 CVE-2015-7202EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory… Firefox after 42.0 Fix from $1,9502015-12-16 HIGH 7.5 CVE-2015-7199 The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-7198 Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote at… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-7194 Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (appl… Firefox after 41.0.2 Fix from $1,9502015-11-05 MEDIUM 6.8 CVE-2015-7189 Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitra… Firefox after 41.0.2 Fix from $1,6002015-11-05 HIGH 7.5 CVE-2015-7183EPSS 7% Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2… Firefox after 41.0.2 Fix from $1,9502015-11-05 CRITICAL 9.8 CVE-2015-7182EPSS 10% Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firef… Firefox after 41.0.2 Fix from $2,3002015-11-05 HIGH 7.5 CVE-2015-7181EPSS 8% The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-4514 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-4513 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to … Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-7180 The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a funct… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7179 The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 o… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7178 The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, m… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7176 The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7177 The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7175 The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a deni… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-7174 The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a deni… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4522 The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a de… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4521 The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of s… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4517 NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory co… Firefox after 40.0.3 Fix from $1,9502015-09-24