| CVE-2022-46884 |
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune…
|
Not rated
|
Aug 24, 2023 |
| CVE-2023-4058 |
Memory safety bugs present in Firefox 115
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4057 |
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4056 |
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4055 |
When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4054 |
When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4053 |
A website could have obscured the full screen notification by using a URL with a scheme handled by an external…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4052 |
The Firefox updater created a directory writable by non-privileged users
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4051 |
A website could have obscured the full screen notification by using the file open dialog
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4050 |
In some cases, an untrusted input stream was copied to a stack buffer without checking its size
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4049 |
Race conditions in reference counting code were found through code inspection
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4048 |
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4047 |
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4046 |
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4045 |
Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-3600 |
During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-37212 |
Memory safety bugs present in Firefox 114
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37210 |
A website could prevent a user from exiting full-screen mode via alert and prompt calls
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37209 |
A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37206 |
Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37205 |
The use of RTL Arabic characters in the address bar may have allowed for URL spoofing
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37204 |
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37203 |
Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to…
|
7.8
High
|
Jul 5, 2023 |
| CVE-2023-3482 |
When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37211 |
Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12
|
Not rated
|
Jul 5, 2023 |