Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Firefox
MEDIUM 6.5
The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnera…
Firefox
MEDIUM 6.1
The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vul…
Firefox
MEDIUM 6.1
An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only…
Firefox
HIGH 8.8
One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of a…
Firefox
HIGH 8.1
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring w…
Firefox
MEDIUM 6.5
Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability aff…
Firefox
MEDIUM 6.5
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially…
Firefox
MEDIUM 6.5
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have reve…
Firefox
MEDIUM 6.5
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function …
Firefox
MEDIUM 6.1
The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This…
Firefox
HIGH 8.8
When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a he…
Firefox
HIGH 8.8
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the d…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox Mobile
MEDIUM 6.5
When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, …
Firefox
MEDIUM 6.5
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted t…
Firefox Mobile
MEDIUM 6.5
By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the…
Firefox
MEDIUM 6.1
Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services r…
Firefox
MEDIUM 6.1
When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then red…
Firefox
CRITICAL 9.8
The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a d…
Firefox
HIGH 8.8
Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability af…
Firefox
HIGH 8.8
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. Thi…
Firefox
HIGH 8.8
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, an…
Firefox
HIGH 8.8
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that wit…
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depe…
Firefox Mobile
MEDIUM 6.8
If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have conn…
Firefox Mobile
MEDIUM 6.5
OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some cert…
Firefox
MEDIUM 6.5
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH…