| CVE-2022-31747 |
Mozilla developers Andrew McCreight, Nicolas B
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31737 |
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31736 |
A malicious website could have learned the size of a cross-origin resource that supported Range requests
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-29917 |
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-26486 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2021-4127 |
An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-4140 |
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-4129 |
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler,…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2019-11708 |
Exploited
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
|
10.0
Critical
|
Jul 23, 2019 |