| CVE-2023-25729 |
Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25737 |
An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25728 |
The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-25746 |
Memory safety bugs present in Firefox ESR 102.7
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25735 |
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-23605 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-23603 |
Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log`…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-23602 |
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-23601 |
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-23599 |
When copying a network request from the developer tools panel as a curl command the output was not being properly…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-23598 |
Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-1945 |
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-0767 |
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2020-12413 |
The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification
|
5.9
Medium
|
Feb 16, 2023 |
| CVE-2022-46882 |
A use-after-free in WebGL extensions could have led to a potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-46881 |
An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-46880 |
A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.*Note*: This…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-46872 |
An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via…
|
8.6
High
|
Dec 22, 2022 |
| CVE-2022-46878 |
Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-46875 |
The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-46874 |
A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-45412 |
When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-45411 |
Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-45421 |
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-45410 |
When a ServiceWorker intercepted a request with FetchEvent, the origin of the request was lost after the ServiceWorker…
|
6.5
Medium
|
Dec 22, 2022 |