| CVE-2024-0746 |
A Linux user opening the print preview dialog could have caused the browser to crash
|
6.5
Medium
|
Jan 23, 2024 |
| CVE-2024-0742 |
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due…
|
4.3
Medium
|
Jan 23, 2024 |
| CVE-2024-0741 |
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable…
|
6.5
Medium
|
Jan 23, 2024 |
| CVE-2023-6867 |
The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking…
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6865 |
`EncryptingOutputStream` was susceptible to exposing uninitialized data
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6864 |
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6863 |
The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that…
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6862 |
A use-after-free was identified in the `nsDNSService::Init`
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6861 |
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6860 |
The `VideoBridge` allowed any content process to use textures produced by remote decoders
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6859 |
A use-after-free condition affected TLS socket creation when under memory pressure
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6858 |
Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling
|
8.8
High
|
Dec 19, 2023 |
| CVE-2023-6857 |
When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6856 |
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM…
|
Not rated
|
Dec 19, 2023 |
| CVE-2023-6212 |
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6209 |
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6208 |
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6207 |
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6206 |
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6205 |
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-6204 |
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-5732 |
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address…
|
Not rated
|
Oct 24, 2023 |
| CVE-2023-5730 |
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3
|
Not rated
|
Oct 24, 2023 |
| CVE-2023-5728 |
During garbage collection extra operations were performed on a object that should not be
|
7.5
High
|
Oct 24, 2023 |
| CVE-2023-5727 |
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which…
|
Not rated
|
Oct 24, 2023 |