Vulnerability index

Browse CVEs

259 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use After FreeCWE-416 × clear
Firefox HIGH 7.8
CVE-2024-3857

The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerabi…

Fix: 115.10 / 125.0+
Fix from $1,950 2024-04-16
Firefox HIGH 7.5
CVE-2024-3853

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability aff…

Fix: 125.0+
Fix from $1,950 2024-04-16
Firefox HIGH 8.1
CVE-2024-2612

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to ach…

Fix: 115.9 / 124.0+
Fix from $1,950 2024-03-19
Firefox MEDIUM 6.5
CVE-2024-0746

A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, …

Fix: 115.7 / 122.0+
Fix from $1,600 2024-01-23
Firefox MEDIUM 6.5
CVE-2024-0752

A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an expl…

Fix: 122.0+
Fix from $1,600 2024-01-23
Firefox HIGH 8.8
CVE-2023-6859

A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115…

Fix: 115.6 / 121.0+
Fix from $1,950 2023-12-19
Firefox Esr HIGH 8.8
CVE-2023-6862

A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firef…

Fix: 115.6+
Fix from $1,950 2023-12-19
Firefox HIGH 8.8
CVE-2023-6207

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbi…

Fix: 115.5 / 115.5.0+
Fix from $1,950 2023-11-21
Firefox MEDIUM 6.5
CVE-2023-6205

It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vul…

Fix: 115.5 / 115.5.0+
Fix from $1,600 2023-11-21
Firefox HIGH 7.5
CVE-2023-5728

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. Thi…

Fix: 115.4 / 115.4.1+
Fix from $1,950 2023-10-25
Firefox CRITICAL 9.8
CVE-2023-5172

A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitab…

Fix: 118+
Fix from $2,300 2023-09-27
Firefox CRITICAL 9.8
CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-af…

Fix: 115.3 / 118+
Fix from $2,300 2023-09-27
Firefox CRITICAL 9.8
CVE-2023-5175

During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, lead…

Fix: 118+
Fix from $2,300 2023-09-27
Firefox MEDIUM 6.5
CVE-2023-5171

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and caus…

Fix: 115.3 / 118+
Fix from $1,600 2023-09-27
Firefox MEDIUM 6.5
CVE-2023-4574

When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventuall…

Fix: 102.15 / 115.2+
Fix from $1,600 2023-09-11
Firefox MEDIUM 6.5
CVE-2023-4575

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually…

Fix: 102.15 / 115.2+
Fix from $1,600 2023-09-11
Firefox MEDIUM 6.5
CVE-2023-4573

When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a poten…

Fix: 102.15 / 115.2+
Fix from $1,600 2023-09-11
Firefox HIGH 8.8
CVE-2022-46884

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to m…

Fix: 106.0+
Fix from $1,950 2023-08-24
Firefox HIGH 8.8
CVE-2023-3600

During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerabil…

Fix: 115.0.1 / 115.0.2+
Fix from $1,950 2023-07-12
Firefox HIGH 8.8
CVE-2023-37209

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object re…

Fix: 115.0+
Fix from $1,950 2023-07-05
Firefox HIGH 8.8
CVE-2023-37201

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, F…

Fix: 102.13 / 115.0+
Fix from $1,950 2023-07-05
Firefox HIGH 8.8
CVE-2023-37202

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting…

Fix: 102.13 / 115.0+
Fix from $1,950 2023-07-05
Firefox HIGH 7.5
CVE-2023-25747

A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects…

Fix: 110.1+
Fix from $1,950 2023-06-19
Firefox HIGH 8.8
CVE-2023-29536

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory…

Fix: 102.10 / 112.0+
Fix from $1,950 2023-06-02
Firefox HIGH 8.8
CVE-2023-29543

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This …

Fix: 112.0+
Fix from $1,950 2023-06-02
Firefox HIGH 8.8
CVE-2023-25735

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting…

Fix: 102.8 / 110.0+
Fix from $1,950 2023-06-02
Firefox HIGH 8.8
CVE-2023-25739

Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext<…

Fix: 102.8 / 110.0+
Fix from $1,950 2023-06-02
Firefox CRITICAL 9.8
CVE-2022-46882

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6…

Fix: 102.6 / 107.0+
Fix from $2,300 2022-12-22
Firefox MEDIUM 6.5
CVE-2022-46880

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on De…

Fix: 102.6 / 105.0+
Fix from $1,600 2022-12-22
Firefox CRITICAL 9.8
CVE-2022-45406

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a Base…

Fix: 102.5 / 107.0+
Fix from $2,300 2022-12-22