| CVE-2024-29944 |
An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution…
|
8.4
High
|
Mar 22, 2024 |
| CVE-2024-2616 |
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to…
|
2.7
Low
|
Mar 19, 2024 |
| CVE-2024-2614 |
Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
|
8.8
High
|
Mar 19, 2024 |
| CVE-2024-2612 |
If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or…
|
8.1
High
|
Mar 19, 2024 |
| CVE-2024-2611 |
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting…
|
5.5
Medium
|
Mar 19, 2024 |
| CVE-2024-2610 |
Using a markup injection an attacker could have stolen nonce values
|
6.1
Medium
|
Mar 19, 2024 |
| CVE-2024-2609 |
The permission prompt input delay could expire while the window is not in focus
|
6.1
Medium
|
Mar 19, 2024 |
| CVE-2023-5388 |
NSS was susceptible to a timing side-channel attack when performing RSA decryption
|
6.5
Medium
|
Mar 19, 2024 |
| CVE-2024-2608 |
`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have…
|
8.4
High
|
Mar 19, 2024 |
| CVE-2024-2607 |
Return registers were overwritten which could have allowed an attacker to execute arbitrary code
|
8.1
High
|
Mar 19, 2024 |
| CVE-2024-2605 |
An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox
|
5.9
Medium
|
Mar 19, 2024 |
| CVE-2024-1553 |
Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7
|
8.1
High
|
Feb 20, 2024 |
| CVE-2024-1552 |
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This…
|
7.5
High
|
Feb 20, 2024 |
| CVE-2024-1551 |
Set-Cookie response headers were being incorrectly honored in multipart HTTP responses
|
6.1
Medium
|
Feb 20, 2024 |
| CVE-2024-1550 |
A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the…
|
6.1
Medium
|
Feb 20, 2024 |
| CVE-2024-1549 |
If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog,…
|
6.1
Medium
|
Feb 20, 2024 |
| CVE-2024-1548 |
A website could have obscured the fullscreen notification by using a dropdown select input element
|
4.3
Medium
|
Feb 20, 2024 |
| CVE-2024-1547 |
Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another…
|
6.5
Medium
|
Feb 20, 2024 |
| CVE-2024-1546 |
When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in…
|
7.5
High
|
Feb 20, 2024 |
| CVE-2024-0743 |
An unchecked return value in TLS handshake code could have caused a potentially exploitable crash
|
7.5
High
|
Jan 23, 2024 |
| CVE-2024-0753 |
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain
|
6.5
Medium
|
Jan 23, 2024 |
| CVE-2024-0755 |
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6
|
8.8
High
|
Jan 23, 2024 |
| CVE-2024-0751 |
A malicious devtools extension could have been used to escalate privileges
|
8.8
High
|
Jan 23, 2024 |
| CVE-2024-0750 |
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting…
|
8.8
High
|
Jan 23, 2024 |
| CVE-2024-0747 |
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have…
|
6.5
Medium
|
Jan 23, 2024 |