| CVE-2022-45406 |
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-36320 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34470 |
Session history navigations may have led to a use-after-free and potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34485 |
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34476 |
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31748 |
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31747 |
Mozilla developers Andrew McCreight, Nicolas B
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31737 |
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31736 |
A malicious website could have learned the size of a cross-origin resource that supported Range requests
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-29917 |
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-26486 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2021-4140 |
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-4129 |
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler,…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2019-11708 |
Exploited
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
|
10.0
Critical
|
Jul 23, 2019 |