| CVE-2024-9393 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
7.5
High
|
Oct 1, 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-8900 |
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of…
|
7.5
High
|
Sep 17, 2024 |
| CVE-2024-7652 |
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially…
|
7.5
High
|
Sep 6, 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8386 |
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of…
|
6.1
Medium
|
Sep 3, 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8383 |
Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that…
|
7.5
High
|
Sep 3, 2024 |
| CVE-2024-8382 |
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for…
|
8.8
High
|
Sep 3, 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8381 |
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-7531 |
Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on…
|
6.3
Medium
|
Aug 6, 2024 |
| CVE-2024-7529 |
The date picker could partially obscure security prompts
|
8.1
High
|
Aug 6, 2024 |
| CVE-2024-7526 |
ANGLE failed to initialize parameters which lead to reading from uninitialized memory
|
7.5
High
|
Aug 6, 2024 |
| CVE-2024-7525 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read…
|
9.1
Critical
|
Aug 6, 2024 |
| CVE-2024-7528 |
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2024-7527 |
Unexpected marking work at the start of sweeping could have led to a use-after-free
|
8.8
High
|
Aug 6, 2024 |
| CVE-2024-7524 |
Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection
|
6.1
Medium
|
Aug 6, 2024 |
| CVE-2024-7522 |
Editor code failed to check an attribute value
|
9.1
Critical
|
Aug 6, 2024 |
| CVE-2024-7521 |
Incomplete WebAssembly exception handing could have led to a use-after-free
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2024-7520 |
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution
|
8.8
High
|
Aug 6, 2024 |
| CVE-2024-7519 |
Insufficient checks when processing graphics shared memory could have led to memory corruption
|
8.8
High
|
Aug 6, 2024 |
| CVE-2024-7518 |
Select options could obscure the fullscreen notification dialog
|
6.5
Medium
|
Aug 6, 2024 |
| CVE-2024-6602 |
A mismatch between allocator and deallocator could have led to memory corruption
|
9.8
Critical
|
Jul 9, 2024 |
| CVE-2024-6604 |
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12
|
7.5
High
|
Jul 9, 2024 |