Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Firefox
MEDIUM 6.5
A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, …
Firefox Focus
MEDIUM 6.5
Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing s…
Firefox
MEDIUM 5.3
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Fi…
Firefox
HIGH 7.5
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox <…
Firefox
HIGH 7.5
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects…
Firefox
MEDIUM 6.5
Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Th…
Firefox
MEDIUM 6.1
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, whic…
Firefox
MEDIUM 5.3
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox <…
Firefox
CRITICAL 9.1
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padloc…
Firefox
MEDIUM 6.5
When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash.…
Firefox
CRITICAL 9.8
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of t…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we p…
Firefox
HIGH 8.8
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compi…
Firefox
HIGH 7.3
Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the…
Firefox
CRITICAL 9.8
A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox E…
Firefox
HIGH 8.8
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory cor…
Firefox
HIGH 7.5
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow t…
Firefox
HIGH 7.5
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow…
Firefox
HIGH 7.5
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. T…
Firefox
MEDIUM 6.5
A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spo…
Firefox
MEDIUM 6.1
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vu…
Firefox
MEDIUM 5.3
A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog. *This bug …
Firefox
MEDIUM 5.3
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implem…
Firefox
HIGH 7.5
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability…
Firefox
MEDIUM 6.1
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to s…
Firefox
HIGH 7.5
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption…
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash.…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the…
Firefox
CRITICAL 9.8
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This v…