| CVE-2024-11701 |
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt
|
4.3
Medium
|
Nov 26, 2024 |
| CVE-2024-11700 |
Malicious websites may have been able to perform user intent confirmation through tapjacking
|
8.1
High
|
Nov 26, 2024 |
| CVE-2024-11692 |
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and…
|
4.3
Medium
|
Nov 26, 2024 |
| CVE-2024-11691 |
Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory…
|
8.8
High
|
Nov 26, 2024 |
| CVE-2024-10941 |
A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash
|
4.3
Medium
|
Nov 6, 2024 |
| CVE-2024-10468 |
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10466 |
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10465 |
A clipboard "paste" button could persist across tabs which allowed a spoofing attack
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10464 |
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10463 |
Video frames could have been leaked between origins in some situations
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10462 |
Truncation of a long URL could have allowed origin spoofing in a permission prompt
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10461 |
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and…
|
6.1
Medium
|
Oct 29, 2024 |
| CVE-2024-10460 |
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`
|
5.4
Medium
|
Oct 29, 2024 |
| CVE-2024-10459 |
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable…
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-10458 |
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
|
9.1
Critical
|
Oct 15, 2024 |
| CVE-2024-9936 |
When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially…
|
6.5
Medium
|
Oct 14, 2024 |
| CVE-2024-9680 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critical
|
Oct 9, 2024 |
| CVE-2024-9403 |
Memory safety bugs present in Firefox 130
|
7.3
High
|
Oct 1, 2024 |
| CVE-2024-9391 |
A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full…
|
6.5
Medium
|
Oct 1, 2024 |
| CVE-2024-9395 |
A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in…
|
5.3
Medium
|
Oct 1, 2024 |
| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9400 |
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a…
|
8.8
High
|
Oct 1, 2024 |