Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the…
Firefox
HIGH 7.5
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Fir…
Firefox
HIGH 7.5
During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. Thi…
Firefox
MEDIUM 6.5
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's c…
Firefox
MEDIUM 6.5
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerabil…
Firefox
MEDIUM 5.3
Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header. This…
Firefox
MEDIUM 5.3
An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led …
Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for traini…
Firefox
HIGH 8.8
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially ex…
Firefox
CRITICAL 9.8
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially ex…
Firefox
CRITICAL 9.8
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitab…
Firefox
CRITICAL 9.8
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-af…
Firefox
CRITICAL 9.8
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, lead…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we p…
Firefox
HIGH 7.5
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unp…
Firefox
HIGH 7.4
In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged proce…
Firefox
MEDIUM 6.5
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially e…
Firefox
MEDIUM 6.5
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and caus…
Firefox
HIGH 8.8
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private sha…
Firefox
HIGH 8.8
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showe…
Firefox
HIGH 8.8
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we p…
Firefox
HIGH 8.6
On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive…
Firefox
HIGH 7.5
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have alread…
Firefox
MEDIUM 6.5
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventuall…
Firefox
MEDIUM 6.5
When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually…
Firefox
MEDIUM 6.5
When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which…
Firefox
MEDIUM 6.5
When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the fun…
Firefox
MEDIUM 6.5
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vuln…
Vpn
MEDIUM 5.5
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN se…
Firefox
MEDIUM 6.5
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a poten…