Browse CVEs

HIGH 8.8 CVE-2022-28288 Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox… Firefox 99.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-28281 If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write… Firefox 91.8 / 99.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22764 Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bug… Firefox 91.6 / 97.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22751 Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink repo… Firefox 91.5 / 96.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22752 Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory… Firefox 96.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22738 Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially exploitab… Firefox 91.5 / 96.0+ Fix from $1,9502022-12-22 CRITICAL 9.8 CVE-2021-4129 Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported m… Firefox 91.4.0 / 95.0+ Fix from $2,3002022-12-22 HIGH 8.8 CVE-2022-0511 Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzzing Team … Firefox 97.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-0566 It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing th… Thunderbird 91.6.1+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-0843 Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed e… Firefox 97.0+ Fix from $1,9502022-12-22 CRITICAL 9.8 CVE-2021-43527EPSS 18% NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signa… Nss 3.68.1 / 3.73+ Fix from $2,3002021-12-08 HIGH 8.8 CVE-2021-43534 Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence o… Firefox 91.3.0 / 94.0+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2021-38493 Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption a… Firefox 78.14 / 92.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38494 Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 92.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38495 Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume… Firefox Esr 91.1+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38499 Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 93.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-29988 Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentiall… Firefox 78.13.0 / 91.0+ Fix from $1,9502021-08-17 HIGH 8.8 CVE-2021-29989 Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption a… Firefox 78.13.0 / 91.0+ Fix from $1,9502021-08-17 HIGH 8.8 CVE-2021-29990 Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption a… Firefox 91.0+ Fix from $1,9502021-08-17 HIGH 8.8 CVE-2021-29984 Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This… Firefox 78.13.0 / 91.0+ Fix from $1,9502021-08-17 HIGH 8.8 CVE-2021-29970 A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered … Firefox 78.12 / 90.0+ Fix from $1,9502021-08-05 HIGH 8.8 CVE-2021-29976 Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory c… Firefox 78.12 / 90.0+ Fix from $1,9502021-08-05 HIGH 8.8 CVE-2021-29977 Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 90.0+ Fix from $1,9502021-08-05 HIGH 8.8 CVE-2021-29966 Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 89.0+ Fix from $1,9502021-06-24 HIGH 8.8 CVE-2021-29967 Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption a… Firefox 78.11 / 89.0+ Fix from $1,9502021-06-24 HIGH 8.8 CVE-2021-29947 Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption a… Firefox 88.0+ Fix from $1,9502021-06-24 HIGH 8.8 CVE-2021-23987 Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence o… Firefox 78.9 / 87.0+ Fix from $1,9502021-03-31 HIGH 8.8 CVE-2021-23988 Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 87.0+ Fix from $1,9502021-03-31 MEDIUM 6.5 CVE-2021-23983 By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corrup… Firefox 87.0+ Fix from $1,6002021-03-31 HIGH 8.1 CVE-2021-23981 A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corrup… Firefox 78.9 / 87.0+ Fix from $1,9502021-03-31