Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Firefox
HIGH 8.8
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system…
Firefox
HIGH 8.8
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions…
Firefox
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence o…
Firefox
HIGH 7.8
Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placi…
Firefox
MEDIUM 6.5
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerabi…
Firefox
MEDIUM 6.5
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only t…
Firefox
MEDIUM 6.5
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites…
Firefox
MEDIUM 6.5
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when…
Firefox
MEDIUM 6.5
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of…
Firefox
MEDIUM 6.5
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an…
Firefox Mobile
MEDIUM 6.5
A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current…
Firefox Mobile
MEDIUM 6.5
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintende…
Firefox Esr
MEDIUM 5.5
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actua…
Firefox Esr
MEDIUM 5.5
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not acce…
Firefox
HIGH 7.4
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data dis…
Firefox
HIGH 8.8
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds …
Firefox
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption a…
Firefox
HIGH 7.8
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox m…
Firefox
MEDIUM 6.5
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an admini…
Firefox
MEDIUM 6.5
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information d…
Firefox
HIGH 8.8
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effo…
Firefox
HIGH 8.8
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 8.8
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption…
Firefox
HIGH 8.8
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially…
Firefox
HIGH 8.8
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free conditi…
Firefox
HIGH 8.8
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potenti…
Firefox
MEDIUM 6.5
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible scre…
Firefox
MEDIUM 6.5
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar.…