Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Firefox
HIGH 7.5
Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Firefox
CRITICAL 9.6
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, …
Firefox
MEDIUM 5.3
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderb…
Firefox
MEDIUM 5.3
Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Firefox
MEDIUM 5.3
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
Firefox
HIGH 8.0
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR …
Neqo
MEDIUM 6.5
Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2.
Firefox
CRITICAL 9.8
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability af…
Firefox
CRITICAL 10.0
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Fir…
Firefox
CRITICAL 10.0
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Fir…
Firefox
MEDIUM 6.5
Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event handling with frames.
Firefox
CRITICAL 10.0
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent …
Firefox
CRITICAL 9.8
Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerabili…
Firefox
HIGH 8.3
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(…
Firefox
HIGH 7.8
Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can…
Firefox
MEDIUM 6.5
If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the install prompt d…
Firefox
MEDIUM 5.3
If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the …
Firefox
HIGH 7.5
Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the …
Firefox
MEDIUM 5.3
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on…
Firefox
HIGH 7.5
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lea…
Firefox
MEDIUM 5.3
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loade…
Firefox
HIGH 8.2
A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction.…
Firefox
MEDIUM 5.3
A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser panel insid…
Firefox
MEDIUM 6.5
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site …
Firefox
MEDIUM 5.3
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible wi…
Firefox
MEDIUM 5.3
Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an International…
Firefox
MEDIUM 5.3
The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the…
Firefox
MEDIUM 5.3
Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some fon…
Firefox
MEDIUM 5.3
SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox < 57.
Firefox
MEDIUM 5.3
Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punycode disp…