| CVE-2024-8897 |
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a…
|
6.1
Medium
|
Sep 17, 2024 |
| CVE-2023-29546 |
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,…
|
6.5
Medium
|
Jun 19, 2023 |
| CVE-2023-29534 |
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
|
9.1
Critical
|
Jun 19, 2023 |
| CVE-2023-25747 |
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below…
|
7.5
High
|
Jun 19, 2023 |
| CVE-2023-29547 |
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created,…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-29537 |
Multiple race conditions in the font initialization could have led to memory corruption and execution of…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29544 |
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-29536 |
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29543 |
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-29535 |
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29551 |
Memory safety bugs present in Firefox 111
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-29541 |
Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-29550 |
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-29533 |
A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29540 |
Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29549 |
Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-29539 |
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-29548 |
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-29538 |
Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI…
|
Not rated
|
Jun 2, 2023 |
| CVE-2022-26486 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26485 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-1802 |
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-1529 |
An attacker could have sent a message to the parent process where the contents were used to double-index into a…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2021-29952 |
When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that…
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-29953 |
A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the…
|
Not rated
|
Jun 24, 2021 |