| CVE-2024-11697 |
When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?"…
|
8.8
High
|
Nov 26, 2024 |
| CVE-2024-11695 |
A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page,…
|
5.4
Medium
|
Nov 26, 2024 |
| CVE-2024-11694 |
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS…
|
6.1
Medium
|
Nov 26, 2024 |
| CVE-2024-11693 |
The executable file warning was not presented when downloading .library-ms files
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-11692 |
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and…
|
4.3
Medium
|
Nov 26, 2024 |
| CVE-2024-11691 |
Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory…
|
8.8
High
|
Nov 26, 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10466 |
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10465 |
A clipboard "paste" button could persist across tabs which allowed a spoofing attack
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10464 |
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10463 |
Video frames could have been leaked between origins in some situations
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10462 |
Truncation of a long URL could have allowed origin spoofing in a permission prompt
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10461 |
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and…
|
6.1
Medium
|
Oct 29, 2024 |
| CVE-2024-10460 |
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`
|
5.4
Medium
|
Oct 29, 2024 |
| CVE-2024-10459 |
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable…
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-10458 |
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-9680 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critical
|
Oct 9, 2024 |
| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9400 |
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a…
|
8.8
High
|
Oct 1, 2024 |
| CVE-2024-9399 |
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a…
|
7.5
High
|
Oct 1, 2024 |
| CVE-2024-9398 |
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if…
|
5.3
Medium
|
Oct 1, 2024 |
| CVE-2024-9397 |
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting…
|
6.1
Medium
|
Oct 1, 2024 |
| CVE-2024-9396 |
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain…
|
8.8
High
|
Oct 1, 2024 |
| CVE-2024-9394 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
6.1
Medium
|
Oct 1, 2024 |