Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Firefox
HIGH 8.8
The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, lead…
Firefox
HIGH 7.5
If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exp…
Firefox
MEDIUM 6.5
Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable cr…
Firefox
MEDIUM 6.5
Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a potentially exploitable crash…
Firefox Esr
HIGH 7.5
A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock prot…
Firefox
HIGH 8.8
The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and…
Firefox
CRITICAL 9.8
Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Firefox ESR…
Firefox
CRITICAL 9.8
Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox …
Firefox
MEDIUM 6.5
By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript execution a…
Firefox
CRITICAL 9.6
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in th…
Firefox
HIGH 8.8
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing thi…
Firefox
MEDIUM 6.5
In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to a use-after-free causing a po…
Firefox
HIGH 8.8
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerabili…
Firefox
HIGH 8.8
Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a pote…
Firefox
MEDIUM 6.5
<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use…
Firefox Esr
MEDIUM 6.5
After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. Th…
Firefox
MEDIUM 6.5
When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exp…
Firefox
HIGH 8.8
A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially e…
Firefox
HIGH 8.8
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those liv…
Firefox
HIGH 8.8
When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory co…
Firefox
HIGH 8.8
During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploi…
Firefox
HIGH 7.5
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially …
Firefox
HIGH 8.8
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects …
Firefox
HIGH 8.8
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered …
Firefox
HIGH 8.8
A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may ha…
Firefox
CRITICAL 9.8
The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a d…
Firefox
HIGH 8.8
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, an…
Firefox
HIGH 8.8
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-…
Firefox
HIGH 8.8
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. Thi…
Firefox
CRITICAL 9.8
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence o…