Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Firefox
HIGH 8.8
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to m…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showe…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we p…
Firefox
CRITICAL 9.8
Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the…
Firefox
HIGH 7.5
When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expecte…
Firefox
MEDIUM 5.5
When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. *This bug only affects Firefox on Windows. …
Firefox
HIGH 7.5
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash whi…
Firefox
HIGH 7.5
A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing…
Firefox
MEDIUM 6.5
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively…
Firefox
MEDIUM 6.5
A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This co…
Firefox
MEDIUM 5.9
Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vu…
Firefox
HIGH 8.8
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerabil…
Firefox
HIGH 7.5
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Fi…
Firefox
MEDIUM 5.3
Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same…
Firefox
MEDIUM 5.3
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a po…
Firefox
HIGH 8.8
During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerabil…
Firefox
MEDIUM 6.5
The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115.
Firefox
MEDIUM 5.4
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects F…
Firefox
HIGH 8.8
Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we…
Firefox
HIGH 8.8
Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the…
Firefox
MEDIUM 6.5
When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of '…
Firefox
HIGH 8.8
A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object re…
Firefox
HIGH 7.8
Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creatin…
Firefox
MEDIUM 6.5
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This…
Firefox
MEDIUM 6.5
The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox < 115.
Firefox
MEDIUM 6.5
Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulne…
Firefox
MEDIUM 6.5
A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing att…
Firefox
HIGH 7.8
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Fire…
Firefox
HIGH 8.8
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, F…
Firefox
HIGH 8.8
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting…