| CVE-2023-5723 |
An attacker with temporary script access to a site could have set a cookie containing invalid characters using…
|
Not rated
|
Oct 24, 2023 |
| CVE-2023-5722 |
Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a…
|
Not rated
|
Oct 24, 2023 |
| CVE-2023-5721 |
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due…
|
Not rated
|
Oct 24, 2023 |
| CVE-2023-5175 |
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-5173 |
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly…
|
Not rated
|
Sep 27, 2023 |
| CVE-2023-5172 |
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-5170 |
In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a…
|
Not rated
|
Sep 27, 2023 |
| CVE-2023-5176 |
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-5174 |
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-5171 |
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker…
|
Not rated
|
Sep 27, 2023 |
| CVE-2023-5169 |
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds…
|
Not rated
|
Sep 27, 2023 |
| CVE-2023-5168 |
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-4585 |
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1
|
8.8
High
|
Sep 11, 2023 |
| CVE-2023-4584 |
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4583 |
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available…
|
7.5
High
|
Sep 11, 2023 |
| CVE-2023-4582 |
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when…
|
8.8
High
|
Sep 11, 2023 |
| CVE-2023-4581 |
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4580 |
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4579 |
Search queries in the default search engine could appear to have been the currently navigated URL if the search query…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4578 |
When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4577 |
When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4576 |
On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4575 |
When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4574 |
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4573 |
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a…
|
Not rated
|
Sep 11, 2023 |