Browse CVEs

HIGH 7.8 CVE-2024-3857 The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerabi… Firefox 115.10 / 125.0+ Fix from $1,9502024-04-16 HIGH 7.5 CVE-2024-3853 A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability aff… Firefox 125.0+ Fix from $1,9502024-04-16 HIGH 8.1 CVE-2024-2612 If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to ach… Firefox 115.9 / 124.0+ Fix from $1,9502024-03-19 MEDIUM 6.5 CVE-2024-0746 A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, … Firefox 115.7 / 122.0+ Fix from $1,6002024-01-23 MEDIUM 6.5 CVE-2024-0752 A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an expl… Firefox 122.0+ Fix from $1,6002024-01-23 HIGH 8.8 CVE-2023-6859 A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115… Firefox 115.6 / 121.0+ Fix from $1,9502023-12-19 HIGH 8.8 CVE-2023-6862 A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firef… Firefox Esr 115.6+ Fix from $1,9502023-12-19 HIGH 8.8 CVE-2023-6207 Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbi… Firefox 115.5 / 115.5.0+ Fix from $1,9502023-11-21 MEDIUM 6.5 CVE-2023-6205 It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vul… Firefox 115.5 / 115.5.0+ Fix from $1,6002023-11-21 HIGH 7.5 CVE-2023-5728 During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. Thi… Firefox 115.4 / 115.4.1+ Fix from $1,9502023-10-25 CRITICAL 9.8 CVE-2023-5172 A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitab… Firefox 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5174 If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-af… Firefox 115.3 / 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5175 During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, lead… Firefox 118+ Fix from $2,3002023-09-27 MEDIUM 6.5 CVE-2023-5171 During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and caus… Firefox 115.3 / 118+ Fix from $1,6002023-09-27 MEDIUM 6.5 CVE-2023-4574 When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventuall… Firefox 102.15 / 115.2+ Fix from $1,6002023-09-11 MEDIUM 6.5 CVE-2023-4575 When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually… Firefox 102.15 / 115.2+ Fix from $1,6002023-09-11 MEDIUM 6.5 CVE-2023-4573 When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a poten… Firefox 102.15 / 115.2+ Fix from $1,6002023-09-11 HIGH 8.8 CVE-2022-46884 A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to m… Firefox 106.0+ Fix from $1,9502023-08-24 HIGH 8.8 CVE-2023-3600 During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerabil… Firefox 115.0.1 / 115.0.2+ Fix from $1,9502023-07-12 HIGH 8.8 CVE-2023-37209 A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object re… Firefox 115.0+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2023-37201 An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, F… Firefox 102.13 / 115.0+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting… Firefox 102.13 / 115.0+ Fix from $1,9502023-07-05 HIGH 7.5 CVE-2023-25747 A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects… Firefox 110.1+ Fix from $1,9502023-06-19 HIGH 8.8 CVE-2023-29536 An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory… Firefox 102.10 / 112.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-29543 An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This … Firefox 112.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-25735 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting… Firefox 102.8 / 110.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-25739 Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext<… Firefox 102.8 / 110.0+ Fix from $1,9502023-06-02 CRITICAL 9.8 CVE-2022-46882 A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6… Firefox 102.6 / 107.0+ Fix from $2,3002022-12-22 MEDIUM 6.5 CVE-2022-46880 A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on De… Firefox 102.6 / 105.0+ Fix from $1,6002022-12-22 CRITICAL 9.8 CVE-2022-45406 If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a Base… Firefox 102.5 / 107.0+ Fix from $2,3002022-12-22