| CVE-2023-37208 |
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37207 |
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program,…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37202 |
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37201 |
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS
|
Not rated
|
Jul 5, 2023 |
| CVE-2019-25136 |
A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code…
|
10.0
Critical
|
Jun 19, 2023 |
| CVE-2023-34417 |
Memory safety bugs present in Firefox 113
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2023-34415 |
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect,…
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-25736 |
An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2023-25733 |
The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a…
|
7.5
High
|
Jun 19, 2023 |
| CVE-2023-34416 |
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-34414 |
The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect…
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-29545 |
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable…
|
6.5
Medium
|
Jun 19, 2023 |
| CVE-2023-29542 |
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious…
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2023-29532 |
A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service…
|
5.5
Medium
|
Jun 19, 2023 |
| CVE-2023-29531 |
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a…
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2023-32216 |
Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team…
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-32214 |
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-32210 |
Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately…
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-32209 |
A maliciously crafted favicon could have led to an out of memory crash
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-32208 |
Service workers could reveal script base URL due to dynamic `import()`
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-32215 |
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-32213 |
When reading a file, an uninitialized value could have been used as read limit
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-32206 |
An out-of-bound read could have led to a crash in the RLBox Expat driver
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-32212 |
An attacker could have positioned a `datalist` element to obscure the address bar
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-32205 |
In multiple cases browser prompts could have been obscured by popups controlled by content
|
Not rated
|
Jun 2, 2023 |